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Can  your  supply  chain 
I  get  dangerous  products 

off  the  market  fast? 

Recalls  can  take  a  huge 
i  bite  out  of  your  company’s 

I  reputation  and  revenue. 

;  Here’s  howto  limit 

I 

i  the  damage. 


BY  KIM  S.  NASH 
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Leverage 

an  Outsourcing  Relationship 

to  Reach  Your  Business  Goals 

Executive  Summary: 

Defining  your  potential  return  on  outsourcing  is  a  key  step  in  establishing,  meeting  and 
exceeding  business  goals.  This  paper  examines  how  Cognizant  works  with  its  clients  to 
define  and  achieve  ROO  by  identifying  efficiencies  and  new  opportunities.  You  will  learn: 

How  companies  can  measure  the  efficiencies  found  through  an  outsourcing 
relationship  and  gain  long-term  value  from  their  outsourcing  initiatives. 

What  types  of  costs  and  benefits  clients  can  measure  when  entering  into  or  extending 
an  outsourcing  relationship. 


“We  wanted  to  keep 
some  of  the  heat  out  of 
this  dialogue,  and  show 
a  purely  quantitative 
balanced  scorecard 
view  of  that  asset  and 
determine  if  it  really 
does  add  value  to  the 
business,”  says 
Kaushik  Bhaumik 
of  Cognizant. 


How  clients  can  use  Cognizant's  Transform  While  Perform^*^  (TwP)  methodology 
to  lay  out  a  roadmap  for  success  by  identifying  the  benefits  from  outsourcing 
selected  operations. 


Enterprises  have  made  it  clear  they 
aren't  looking  for  an  outsourcing 
relationship  mired  in  the  letter  of 
the  contract.  They  want  a  proactive 
outsourcing  partner  that  can 
suggest  meaningful  improvements 
in  business  processes,  and  share 
best  practices. 


Forrester  Research,  Inc.  uncovered 
a  pattern  of  customer  unrest  when 
it  examined  the  performance 
of  key  outsourcing  firms  in  the 
application  outsourcing  space 
earlier  this  year.  While  customers 
were  generally  satisfied  with  how 
outsourcers  provided  basic  services,  they  wanted  more. 
Customers  said  they  were  interested  in  working  with  an 
outsourcing  partner  that  provided  insights  and  guidance 
on  gaining  business  value  from  the  engagement.' 

As  a  result,  Forrester's  consulting  arm  worked  with 
Cognizant  to  guantify  the  costs  that  an  outsourcing 
client  can  expect  to  either  reduce  or  incur  through 
an  outsourcing  initiative,  and  the  business  benefits, 
including  new  ideas  and  opportunities,  that  may  emerge 
from  the  relationship.  Cognizant,  based  in  Teaneck, 
N.J.,  is  a  global  provider  of  IT  and  business  process 
outsourcing  services  built  on  rich  business  domain 
experience,  broad-based  technology  savvy  and  a  client 
relationship  model  built  on  a  true  spirit  of  partnership. 

By  working  collaboratively  with  clients  to  precisely 
quantify  costs  and  benefits,  Cognizant  can  create  a 


realistic  road  map  for  rationalizing  their  application 
portfolios  and  reallocating  resources  to  IT  investments. 

Establishing  Priorities 

One  challenge  in  quantifying  the  benefits  from 
outsourcing  is  an  overemphasis  on  labor  arbitrage, 
saving  the  client  money  by  transferring  work  from 
internal  IT  staff  to  a  sourcing  provider  that  keeps  costs  in 
check  by  employing  less  expensive  offshore  experts,  says 
Jon  Erickson,  senior  consultant  for  Forrester  Consulting. 
But  Cognizant  recognized  early  that  the  focal  point  of  an 
outsourcing  relationship  had  to  be  on  creating  business 
value,  not  labor  arbitrage,  he  adds. 

Labor  arbitrage  has  been  a  focus  for  many  executives, 
but  they're  learning  that  in  today's  business  climate 
these  relationships  must  extend  beyond  cost  savings. 
For  example,  this  might  include  a  focus  on  the 
timely  -  or  even  early  -  delivery  of  a  new  project,  which 
would  bring  revenues  in  sooner.  "If  you  do  a  good  job  in 
certain  areas,  there's  a  greater  chance  the  project  will  be 
delivered  the  way  you  intended  it,"  says  Erickson.  Doing 
the  project  right  translates  into  higher-quality  work  that 
yields  greater  operational  efficiencies  or  transformative 
advantages. 

"If  we  can  reduce  the  risk,  improve  the  quality  or  reduce 
the  variability  in  the  project  delivery,  value  is  being 
derived  from  the  overall  value  of  the  project,"  says 
Erickson,  noting  that  the  value  goes  beyond  the  costs 


This  is  the  third  in  a  series  of  white  papers  focused  on 
measuring  return  on  outsourcing.  To  view  the  previous 
papers,  go  to  www.cognizant.com/go/roo. 

Next  month: 

"The  Importance  of  the  Client  Interface." 
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Cognizant  Insights  #3:  ROO  Outcome 


associated  with  IT  and  rests  in  the  ability  of  the  business 
to  benefit  from  a  new  and  reliable  application. 

Cognizant's  return  on  outsourcing  methodology  includes 
a  multi-dimensional  calculator  that  considers  the  diverse 
costs  and  benefits  associated  with  an  outsourcing 
relationship.  (See  the  first  installment  of  this  series.) 
The  tool  allows  Cognizant  to  work  with  an  existing  or 
new  client  to  quantify  the  benefits  from  an  outsourcing 
deal,  and  to  set  and  achieve  business  goals  for  both  its 
clients  and  Cognizant.  Based  on  Forrester's  proprietary 
Total  Economic  Impact™  methodology,  the  tool  helps 
clients  compare  what  they  have  been  spending  on  IT  with 
projected  costs  in  an  outsourcing  relationship,  as  well  as 
how  outsourcing  can  improve  project  quality  and  ensure 
the  timely  and  productive  delivery  of  IT  services. 

Transform  While  Perform 

To  get  maximum  mileage  from  the  return  on  outsourcing 
model,  enterprises  must  think  beyond  potential  savings 
on  new  outsourcing  contracts.  Working  collaboratively 
with  a  partner  like  Cognizant,  they  can  establish  goals 
that  focus  on  how  improved  IT  services  delivery  can 
result  in  better  business  value.  From  there,  they  can 
construct  a  blueprint  for  delivering  new  initiatives 
throughout  the  life  of  the  contract  that  transform  goals 
into  reality.  Using  Cognizant's  Transform  While  Perform™ 
(TwP)  methodology,  clients  can  create  a  detailed  road 
map  for  moving  expense-intensive  IT  activities  such  as 
applications  or  infrastructure  maintenance  to  Cognizant, 
and  free  up  resources  to  focus  on  innovation  and  more 
business-critical  endeavors. 

Through  this  transformation,  clients  are  able  to  conduct 
a  value-based  assessment  of  their  technology  portfolio. 
This  metrics-based  assessment  allows  executives  to 
examine  applications  and  their  supporting  technologies 
from  a  financial  perspective.  With  various  internal 
constituencies  helping  to  define  metrics,  each  IT  asset 
is  scored  in  terms  of  its  ability  to  generate  business 
measured  against  overall  organizational  objectives. 
Clients  can  then  make  informed  decisions  about  which 
applications  should  be  eliminated,  outsourced  or  merged 
with  other  applications. 

In  reality,  outcomes  to  decisions  like  these  are  often  won 
by  the  most  vocal  users.  "We  wanted  to  keep  some  of  the 
heat  out  of  this  dialogue,  and  show  a  purely  quantitative 
balanced  scorecard  view  of  that  asset  and  determine  if 
it  really  does  add  value  to  the  business,"  says  Kaushik 
Bhaumik,  Cognizant's  vice  president  of  consulting  and 
business  process  outsourcing. 

"We  take  all  of  the  metrics  and  combine,  rationalize 
and  normalize  them  so  that  we  can  come  up  with  a 
composite  score  for  that  asset  that  reflects  not  only 
the  cost  associated  with  that  asset  but  the  benefits  and 


Questions  about  ROO? 


usage  patterns  associated  with  it," 
says  Bhaumik. 

The  analysis  helps  Cognizant 
develop  a  meaningful  road  map 
for  its  clients,  taking  into  account 
current  requirements  and  future 
needs  across  the  enterprise.  This 
various  options  that  clients  can  pursue  for  each  IT  asset 
and  potential  benefits  along  an  implementation  time 
line.  These  benefits  -  highlighted  as  indicators  -  allow 
clients  to  track  its  progress  throughout  the  outsourcing 
contract. 


Send  your  query  to 
roo@cognizant.com. 

We'll  answer  frequently 
asked  questions  in  a  future 
installment  of  this  series. 

road  map  outlines 


Moreover,  it  helps  Cognizant  and  the  client  adjust  their 
strategy  and  goals  on  the  fly,  and  allows  Cognizant  to 
become  a  true  business  partner,  sharing  in  the  outcomes 
and  sharing  the  risks  and  rewards  of  a  broader  enterprise 
undertaking,  says  Bhaumik. 

The  Cognizant  Advantage 

While  other  outsourcers  may  enter  into  a  contract  with 
a  technology-heavy  strategic  plan.  Cognizant  offers 
customers  rich  technology  experience  and  skills,  but 
also  establishes  a  close  partnership  with  the  business 
users  and  a  focus  on  the  indicators  of  business  success. 
Through  TwP,  Cognizant  helps  customers  identify  and 
achieve  their  return  on  outsourcing,  and  use  information 
technology  to  attain  their  business  goals.  Leveraging 
more  than  13  years  of  experience  in  global  IT  service 
delivery  to  clients  industry-wide.  Cognizant  seamlessly 
combines  offshore  development  with  local  consulting  to 
help  companies  more  efficiently  execute  their  IT  strategy 
and  achieve  more  predictable  outcomes  that  mesh  with 
business  objectives. 

'The  Forrester  Wave™:  North  American  Applications  Outsourcing,  01  2007, 
Forrester  Research,  Inc. 


About  Cognizant 

Headquartered  in  Teaneck,  New  Jersey,  Cognizant  is  a  leading 
provider  of  IT  and  business  process  outsourcing  services. 
Focused  on  delivering  strategic  information  technology 
solutions  that  address  the  complex  business  needs  of  its 
clients.  Cognizant  applies  a  unique  on-site/offshore  model  to 
deliver  applications  management,  development,  integration 
and  reengineering;  infrastructure  management;  business 
process  outsourcing;  and  numerous  related  services,  such 
as  enterprise  consulting,  technology  architecture,  program 
management  and  change  management. 

For  additional  resources,  visit  www.cognizant.com/go/roo. 
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Male  of  Two  CIOs 

In  which  our  heroes  are  both  lionized  and  reviled 

”It  was  the  best  of  times,  it  was  the  worst  of  | 
times,  it  was  the  age  of  wisdom,  it  was  the  age  of 
foolishness,  it  was  the  epoch  of  belief,  it  was  the 
epoch  of  incredulity,  it  was  the  season  of  Light,  |  ^ 
it  was  the  season  of  Darkness,  it  was  the  spring  , 
of  hope,  it  was  the  winter  of  despair...in  short, 
the  period  was  so  far  like  the  present  period 
that  some  of  its  noisiest  authorities  insisted 
on  its  being  received,  for  good  or  for  evil,  in  r 
the  superlative  degree  of  comparison  only.” 
-Charles  Dickens,  A  Tale  of  Two  Cities.  C 

As  1  was  rereading  this  amazing  opening  sentence  from  one  of  the  great  works  of  S 
English  literature,  1  was  struck  by  how  apt  a  description  it  is  of  the  state  of  business  y 
technology  leadership  today.  Some  noisy  authorities  are  proclaiming  that  IT  is  a 
commodity;  others,  that  it’s  the  key  to  competitive  advantage.  Some  say  CIOs  are 
little  more  than  digital  plumbers;  others,  that  they’re  the  new  masters  of  a  fiercely  S 
competitive  global  marketplace.  i 

It’s  a  wonder  more  CIOs  don’t  suffer  identity  crises.  ^ 

In  fact,  IT  is  both  utility  and  innovation  engine.  But  what  does  that  mean  for 
CIOs?  Should  the  role  be  split,  as  Peter  Drucker  predicted  it  would  years  ago?  Must 
a  CIO  choose  between  the  critical  work  of  operational  excellence  and  the  game-  f.. 
changing  j  ob  of  business  strategy  and  differentiation?  Can  one  person  play  in  and 
lead  in  both  realms?  (If  you  know  the  answer  to  this,  please  drop  me  a  note!) 

In  this  issue,  VC  legend  Tom  Perkins  advises  CIOs  to  be,  above  all,  cautious  and 
cost-conscious  (see  “Five  Things  I’ve  Learned,”  Page  68),  while  management  guru 
Gary  Hamel  tells  you  to  spend  your  time  on  the  fringes  of  the  Web  because  that’s 
where  the  innovation  is  taking  place  (see  “No  Innovation  for  You!”  Page  50).  g 

How  do  you  make  sense  of  these  kinds  of  disconnects? 

Or  maybe  you  just  have  to  stop  worrying  about  making  sense. 

Hamel  offers  these  tips  for  innovation; 

■  Challenge  industry  dogma. 

■  Be  alert  to  early  harbingers  of  big  shifts  in  demographics,  technology,  regula¬ 
tion  or  whatever  it  is  that  most  of  your  industry  isn’t  paying  close  attention  to. 

■  Discover  the  hidden  or  unarticulated  needs  of  your  customers. 

The  most  successful  CIOs  1  know  think  that  way  and  are  cost-conscious  too. 

For  them,  this  simply  may  be  the  best  of  times. 


Abbie  Lundberg,  Editor  in  Chief 
lundberg@cio.com 
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NOW  T’S  NOT 


FROM  THE  CEO 


IT’s  Never  Easy 

Consumer  IT  in  the  enterprise  is  the  new  challenge 

Every  now  and  then  you  hear  something  differ¬ 
ent,  something  coming  from  a  different  perspec¬ 
tive  and  a  different  vantage  point.  That’s  when 
it’s  time  to  sit  up  and  pay  attention.  Recently,  two 
of  the  most  respected  individuals  in  their  fields 
made  the  following  observations; 

“I  think  you’ll  see  a  much  higher  degree  of  tech¬ 
nical  focus  in  the  CIO  and  a  higher  understanding 
of  technology  in  business  across  the  C  suite.  The 
distinction  that  we’re  all  so  comfortable  with— that 
there’s  technology  and  there’s  business— that  distinction  is  going  to  vanish.”  That’s 
Google  CIO  Douglas  Merrill  in  the  Nov.  1  CIO  {www.cio.eom/article/144S00). 

“The  role  of  the  CIO  is  at  a  crossroads.  CIOs  can  once  again  reinvent  them¬ 
selves— and  enhance  their  standing,  influence  and  contribution  to  the  corpora¬ 
tion— or  their  role  will  be  marginalized:  setters  of  technology  standards,  managers 
of  infrastructure...or  worse,  overseers  of  a  technically  savvy  procurement  shop.” 
That’s  IBM  CEO  Sam  Palmisano. 

When  I  first  read  these  statements,  I  immediately  wanted  to  check  my  calendar 
because  I  thought  I  had  gone  back  in  time  and  was  listening  to  Nicholas  (“Does 
IT  Matter?”)  Carr.  Then  I  started  thinking  about  why  these  two  accomplished 
men  were  choosing  this  particular  time  to  question  the  CIO’s  future  when  to  me 
it  seemed  that  the  CIO  role  had  regained  whatever  creditability  it  may  have  lost 
and  has  today  more  than  earned  its  front  row  seat  in  the  C  suite. 

One  reason  I  came  up  with  is  that  the  rapid  adoption  of  consumer  IT  in  the 
enterprise  is  causing  the  computing  platform  to  shift  under  the  CIO’s  feet,  push¬ 
ing  him  to  once  again  immerse  himself  in  technology  and  perhaps  distracting  him 
from  the  business  of  being  strategic  and  driving  innovation.  A  year  ago  it  was  rare 
that  CIOs  would  mention  mash-ups,  RSS,  blogs  or  wikis,  Ajax  and  APIs  as  topics 
and  technologies  they  were  focused  on.  Now  it’s  common. 

As  Merrill  says,  “It’s  very  difficult  for  classic  CIOs  to  understand  how  to  respond 
in  the  best  way  to  this  consumerization  of  IT.  The  nature  of  risk  management  is 
changing  from  clean  cost-flow  across  technology  to  clean  talent-flow  into  technol¬ 
ogy,  which  is  a  very  different  thing  to  manage.”  And  a  new  challenge  for  CIOs. 

It  is  this  challenge  and  opportunity  that  CIOs  will  need  to  address  in  the  coming 
year  to  ensure  that  they  don’t,  as  Palmisano  warns,  get  marginalized.  Is  the  CIO 
once  again  at  a  crossroads?  I  would  enjoy  hearing  your  thoughts. 


Michael  Friedenberg,  President  and  CEO 
mfriedenberg(a)cio.com 
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The  formula  one  racing  car  is  the  most  complex  and  advanced  car  in  the  world,  packing  research 
in  aerodynamics,  engine  technology,  brakes,  tires  and  modeliing.  It  has  more  in  common  with  a 
jet  plane  than  it  does  with  a  high  performance  car.  Tata  Consultancy  Services  (TCS)  works  with 
Scuderia  Ferrari  before,  during  and  in-between  races  to  help  their  cars  go  even  faster.  As  one  of 
the  world's  fastest  growing  technology  and  business  solutions  providers,  TCS  ensures  that  all 
mechanical  and  electronic  systems  perform  at  their  optimum  under  levels  of  extreme  stress. 
Managing  pressure  and  troubleshooting  in  a  situation  where  every  little  advantage  makes 
a  huge  difference.  And  of  course,  enabling  Ferrari  to  experience  certainty. 


Official 

Supplier 


Scuderia 

Ferrari 


TATA  CONSULTANCY  SERVICES 

Experience  certainty. 

IT  Services  Business  Solutions  Outsourcing 

■  ■ 

To  learn  how  your  business  can  experience  certainty,  visit  www.tcs.com 
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If  your  datacenter  temperature  has  got  you  hot  under  the  collar,  we  can  help.  We’re  Digital  Realty  Trust,  the  largest  owner  and  operator  of  datacenters  in 
the  industry.  Since  we've  purchased  and  developed  over  $2  billion  in  datacenter  assets,  we  know  a  thing  or  two  about  delivering  facilities  with  efficient  cooling 
architectures.  To  learn  more,  download  our  whitepaper,  "Cooling  Your  Datacenter"  at  www.digitalrealtytrust.com/hothead 


Digital  Realty  Trust 
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Your  Assignment:  Chapter  11 


been  hit  hard.  The  $8.5  billion 
Dana  Corp.  filed  for  Chapter  11 
last  year  and  $11  billion  Visteon,  a 
Ford  spin-off,  had  to  restructure 
in  2005.  Still,  Visteon  lost  $163 
million  last  year. 

Walker’s  lessons  began  with 
a  frank  talk  with  one  of  her  com¬ 
petitors. 

Even  before  the  bankruptcy 
filing.  Walker,  who  has  been  at 
Delphi  for  10  years,  knew  she 
needed  to  make  changes.  In 
2004,  two  benchmarking  studies 
revealed  that  Delphi  was  spend¬ 
ing  more  on  IT  than  its  rivals. 

So  Walker  swallowed  hard  and 
called  one  of  those  rivals  for  help:  Delphi  CIO 

John  Crary,  VP  Continued  on  Page  12  Bette  Walker 


BANKRUPTCY  Delphi  VP 
and  CIO  Bette  Walker  wouldn’t 
wish  bankruptcy  on  anyone.  But 
by  managing  her  team  during 
the  company’s  two  years  under 
Chapter  11,  Walker  learned  les¬ 
sons  that  many  CIOs  will  have 
to  study  in  the  next  few  years,  as 
companies  including  American 
Home  Mortgage,  Bally  Total  Fit¬ 
ness,  Consolidated  Energy,  New 
Century  Financial  and  Quaker 
Fabric  have  all  filed  for  Chapter 
11  protection  within  the  past 
year. 

Delphi,  a  $26  billion  spin-off 
of  General  Motors,  entered  Chap¬ 
ter  11  bankruptcy  protection  in 
2005.  Its  competitors  also  have 
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Big  Brother  Is  Watching  You  in  Chicago 


SECURITY  Chicago  is  developing  a  futuristic  video 
surveillance  system  designed  to  scan  city  streets  look¬ 
ing  for  everything  from  bombs  to  traffic  jams. 

For  the  past  few  years,  the  Windy  City  has  been  roll¬ 
ing  out  thousands  of  video  surveillance  cameras  linked 
by  fiber-optic  cables.  Called  Operation  Virtual  Shield, 
the  system  is  intended  to  give  the  city's  emergency 
response  coordination  agency  the  ability  to  keep  track 
of  emergencies  remotely,  in  real  time. 

Now,  with  the  help  of  IBM,  Chicago's  Office  of  Emer¬ 
gency  Management  and  Communications  (OEMC)  is 
looking  to  expand  the  system’s  capabilities  so  that  IBM’s 
software  can  analyze  the  thousands  of  hours  of  video 
recorded  by  Operation  Virtual  Shield’s  cameras. 

“I  think  what  this  software  might  be  able  to  do  is  rec¬ 
ognize  suspicious  behavior  and  alert  our  people  as  to 


what  it  sees,"  says  Kevin  Smith,  a  spokesman  for  OEMC. 

According  to  Smith,  the  software  could  recognize 
a  package  that  had  been  left  in  a  public  place  or  a  car 
parked  where  no  car  is  supposed  to  be. 

IBM  is  talking  to  a  number  of  cities  about  rolling  out 
similar  projects,  but  none  is  as  advanced  as  Operation 
Virtual  Shield. 

OEMC’s  Smith  would  not  say  how  much  the  city  is 
spending  on  the  project  or  when  it  expects  the  video 
analytics  capabilities  to  go  live. 

"The  challenge  is  going  to  be  teaching  computers  to 
recognize  the  suspicious  behavior,"  says  Smith. 

So  when  you’re  visiting  the  City  of  Broad  Shoulders, 
don’t  do  anything  in  public  you  don’t  want  anyone  to 
see.  Because  soon  someone  will  be  able  to. 

-Robert  McMillan 
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SAP  and  Business 
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Continued  from  Page  11 
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ENTERPRISE  SOFTWARE  What  does  SAP’s  recent 
announcement  of  its  intent  to  buy  business  intelligence  purveyor 
Business  Objects  mean  to  CIOs? 

What  it  means  to  SAP  is  clear:  “SAP  realizes  that  this  industry 
requires  strong  acquisition  skills  for  survival  and  growth,”  says 
Ray  Wang,  a  principal  analyst  at  Forrester  Research. 

“One  wonders  if  [SAP]  bought  Business  Objects  so  someone 
else  couldn't  buy  it,"  says  Dee  Slater,  CIO  of  Wolverine  World¬ 
wide,  a  $1.1  billion  footwear  maker.  Wolverine  is  a  former  Busi¬ 
ness  Objects  customer  that  switched  over  to  SAP’s  business 
information  warehouse  tool  in  2004  because,  says  Slater,  the 
support  for  Business  Objects  “was  awful.” 

According  to  451  Group  analysts  Krishna  Roy  and  Brenon 
Daly,  SAP’s  “game  plan  is  to  integrate  some  Business  Objects 
products  into  the  SAP  NetWeaver  integration  platform,  while  oth¬ 
ers  will  remain  independent  and  heterogeneous.” 

While  a  lot  of  the  details  remain  unknown,  Forrester’s  Wang 
offers  some  key  questions  that  CIOs  should  ask  right  now: 

■  Will  Business  Objects  users  be  forced  onto  SAP’s 
NetWeaver  in  the  long  run? 

■  Can  users  ensure  that  they  do  not  have  to  use  NetWeaver? 

■  How  will  SAP  support  non-SAP  Business  Objects  users? 

■  Will  key  managers  change,  and  who  will  replace  them? 

Wang  stresses  that  now  is  a  good  time  to  negotiate  longer 

maintenance  contracts  and  buy  new  modules  at  a  discount. 
"Sales  reps  typically  offer  sweetheart  deals  to  close  out  the  quar¬ 
ter,”  Wang  says. 

The  deal  is  supposed  to  be  closed  by  the  first  quarter  of  2008. 

-Thomas  Wailgum 


What’s  More 
Important 
Than  Alignment? 

People. 

STAFFING  IT-business 
alignment,  long  every  CIO’s  top 
anxiety,  is  now  playing  second 
fiddle  to  the  problem  of  finding 
and  keeping  the  right  people, 
according  to  IT  leaders 
responding  to  the  Society  for 
Information  Management’s 
annual  survey: 

SOURCE:  Society  for  Information 
Management 
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of  IT  at  Lear,  an  $18  billion  supplier  of 
parts  for  car  interiors.  They  met  after 
work. 

What  Crary  said  shocked  her:  While 
Delphi  spent  2.1  percent  of  revenue  on 
IT,  Lear  spent  1  percent. 

Walker  decided  that  Delphi  had  to 
get  near  that  1  percent.  To  do  that,  she 
started  drawing  lines.  She  wanted  to  cut 
IT  suppliers  from  162  to  fewer  than  10  to 
simplify  negotiations.  Delphi’s  internal 
IT  group  decided  to  keep  technology 
architecture,  strategy,  support  and  cli¬ 
ent-facing  applications  such  as  ordering 
parts  online;  it  would  outsource  infra¬ 
structure  and  networks,  what  Walker 
calls  routine  functions. 

Walker  moved  the  most  capable  per¬ 
son  from  each  of  the  areas  IT  retained 
out  of  his  or  her  regular  job  to  oversee 
the  reorganization.  They  were  given 
latitude;  Walker  let  them  negotiate  ven¬ 
dor  contracts,  for  example.  But  they  had 
to  meet  that  1  percent  formula. 

Bankruptcy  takes  a  personal  toll.  Ken 
Brame  reorganized  himself  out  of  a  job 
when  he  was  CIO  at  Service  Merchan¬ 
dise  during  that  company’s  Chapter 
11  in  1999.  The  retailer,  which  eventu¬ 
ally  closed  for  good  in  2002,  no  longer 
needed  a  high-level  IT  leader.  “We  deter¬ 
mined  that  there  was  a  level  of  manage¬ 
ment  they  didn’t  need.  They  didn’t  need 
a  Ken  Brame,”  he  said  at  the  time.  He  is 
now  VP  and  CIO  of  AutoZone. 

Sometimes  the  process  at  Delphi 
grinds  Walker  and  her  staff  down.  “This 
is  hard  on  people.  I’m  exhausted  every 
day,”  she  says. 

Delphi’s  IT  costs  are  close  to  1.1  per¬ 
cent  of  revenue,  she  says,  and  the 
company  was  a  CIO  100  honoree  this 
year  for  the  work.  In  September,  the 
company  filed  a  reorganization  plan 
with  the  bankruptcy  court  and  at  press 
time  is  awaiting  a  judge’s  approval. 

-Kim  S.  Nash 
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Leap  ahead 


MULTIPLY  ENERGY  EFFICIENCY 
AND  MAXIMIZE  COOLING. 


THE  COMPLETE  LINE  OF  QUAD-CORE 

INTEL*  XEON*  PROCESSORS  FOR  MAINSTREAM  SERVERS. 

Available  in  up  to  32  processor  configurations  starting  September  5th.  Learn  why  datacenter 

efficiency  starts  with  Intel  inside.  Visit  intel.com/xeon 
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The  Ferrari  of 
Phones— Literally 

GADGETS  If  you  thought  the  iPhone  was 
overpriced,  stop  reading  now. 

Nokia ’s  Vertu  subsidiary  is  selling  a  $25,400 
phone  in  shops  in  Paris,  London,  Hong  Kong 
and  Singapore. 

The  Ascent  Ferrari  60  was  created  to  com¬ 
memorate  sports-car  maker  Ferrari  SpA’s  60th 
anniversary.  The  phones  are  hand 
assembled  using  stainless  steel  and 
titanium  components,  as  well  as 
leather  from  authentic  Ferrari  suppli¬ 
ers,  says  Elizabeth  Maragh,  a  Vertu 
spokeswoman. 

In  accord  with  the  60th  anniver¬ 
sary  theme,  only  60  phones  have 
been  produced. 

Vertu  has  been  selling  the 
Ascent  Ferrari  60  for  several 
months  now,  alongside  another 
Ferrari-inspired  phone  called 
Ascent  Ferrari  1947  Limited 
Edition. 

Both  phones  feature  the 
Ferrari  prancing  horse  logo 
and  take  design  cues  from 
the  sports  cars.  (No  steering 
wheel  but  it’s  pretty  sleek.) 
But  who  would  spend 
$25,400  on  a  phone? 

Someone  who  appreci¬ 
ates  fine  craftsmanship, 
Maragh  says.  “The  Vertu 
phones  are  very  much  based  on 
craftsmanship  and  unique  materials.  All  of  our 
phones  are  handmade  and  we  go  to  great  lengths 
to  choose  materials  that  we  feel  are  the  highest 
quality  possible.  A  lot  of  people  who  buy  our 
phones  appreciate  these  things  in  life.” 

“A  lot  of  people”  reportedly  includes  Mariah 
Carey,  Jay-Z  and  Catherine  Deneuve. 

In  other  words,  just  plain  folk. 

Incidentally,  anyone  hoping  to  save  a  few 
thousand  bucks  by  waiting  for  Vertu  to  sud¬ 
denly  slash  prices  (as  Apple  recently  did  with 
its  iPhone)  for  the  gift-giving  season  is  probably 
waiting  in  vain.  According  to  Maragh,  a  holiday 
price  cut  is  unlikely.  -Robert  McMillan 


Expensive  and 

Dangerous 

LAPTOPS  Most  travelers  carry  little  of  value 
on  their  laptops,  but  those  who  do  carry  valuable 
information  store  an  average  of  $525,000  worth 
of  sensitive  data,  according  to  a  recent  survey. 

The  survey  also  found: 

■  The  average  value  of  personal  informa¬ 
tion  on  travelers’  laptop  computers  is 
$330,000. 

■  39%  of  respondents  have  experienced 
some  form  of  computer  malware,  virus  or 
theft. 

■  Only  32%  of  respondents  said  the  Wi-Fi 
connections  they  employ  to  access  the 
Internet  in  hotels  or  conference  centers  are 
“somewhat"  or  "highly  secure.” 

The  survey  was  conducted  by  iBahn,  a  pro¬ 
vider  of  secure  broadband  services  to  hotels  and 
conference  centers.  It  included  491  participants, 
all  laptop  or  PDA  users  who  stay  in  a  hotel  at 
least  one  night  a  month. 

And  not,  apparently,  sleeping  all  that  well. 

-A  /  Sacco 


Press  Release 
of  the  Month 

VIRTUALLY  CRAZY 

Evian  Natural  Spring  Water  has  just 
announced  its  very  first  venture 
into  the  virtual  world. 

** Partnering  with  the  popular  virtual 
world  Second  Life,  characters... 

that  chose  to  drink  Evian  are 
awarded  with  a  more  lively,  more 
inviting  complexion.  This  virtual 
transformation,  while  not  possible 
in  real  life,  provides  more  than  just 
simply  a  cosmetic  change,  but 
indicates  skin  renewal.*^ 

Thanks  for  reminding  us  of  the  difference 
between  reality  and  fantasy. 

We  get  confused. 
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FINANCE  &  IT 

WORKING  TOGETHER  TO  KEEP  THE  BAD  GUYS  OUT 


TOSHIBA  MFPs  bring  a  perfect  balance  of  security  and  affordability  into  the  workplace.  The  folks  in  IT  will  love 
the  new  Smartcard  technology  because  it  ensures  user  authentication  with  an  ID  card.  And  the  good  people  in  finance 
will  feel  safe  in  knowing  that  Toshiba  MFPs  exceed  ail  government  mandates  for  controlling  access  and  data  integrity. 
Talk  about  a  secure  relationship.  Visit  us  at  copiers.toshiba.com  to  download  our  white  paper  on  security. 


TOSHIBA  o 

Leading  Innovation  »>  secuir;MFP 


TRENDLINES 


Lea rn  to  Really  Love  Web  2 .0 

You  can’t  control  the  apps  your  users  download,  but  you 
can  (and  should)  work  with  them  to  generate  business 
value  in  a  safer  environment 

A  RECENT  REPORT  BY  FORRESTER  RESEARCH  suggests  that  corporate 
IT  departments  have  seen  real,  demonstrable  value  in  Web  2.0  technologies 
and  should  adopt  more  of  them.  But  the  report  also  reveals  that  the  unsanc¬ 
tioned  use  of  consumer,  Web-based  applications— a  phenomenon  CIO 
.v  y  dubbed  “shadow  IT”  in  “Users  Who  Know  Too  Much  and  the  CIOs  Who  Fear 
Them”  (www.cio.com/article/28821)— rema\r\s  high.  That  means  IT  manag¬ 
ers  need  to  get  down  in  the  trenches  with  their  users  to  find  out  what  they're 
doing  and  where  sensitive  corporate  data  could  be  exposed. 

According  to  the  report,  approximately  15  percent  of  the  surveyed  IT 
leaders— from  firms  of  500  or  more  employees  who  are  considering  invest¬ 
ing  in  Web  2.0  technology— say  their  workers  have  used  blogs,  wikis  and 
RSSfor  business  purposes.  About  27  percent  of  those  companies  have 
already  made  formal  investments  in  all  three  of  those  technologies  and  at 
least  92  percent  saw  their  value. 

Meanwhile,  Rob  Koplowitz,  an  author  of  the  Forrester  study,  says  reported 
rogue  usage— from  3  percent  to  8  percent— is  deceptively  low:  “It  could  be  a 
lot  higher  because  unsanctioned  use  is,  by  definition,  underthe  radar.” 

To  avoid  an  ad  hoc  approach  to  Web  2.0  adoption,  Koplowitz  says  IT  depart¬ 
ments  should  get  a  better  handle  on  what  applications  users  have  flocked  to 
and  should  establish  sanctioned  solutions,  ratherthan  shun  them  altogether. 
In  that  way,  IT  avoids  what  could  degenerate  into  an  adversarial  environment. 
Conversely,  supporting  the  technologies  will  allow  IT  managers  to  form  a  long¬ 
term  strategy  with  their  users  that  encourages  testing  and  the  organic  devel¬ 
opment  of  safe  and  reasonable  usage  policies  and  best  practices. 

“It’s  becoming  increasingly  difficult  for  IT  to  control  what  tools  people 
use  in  their  day-to-day  activities,”  Koplowitz  says.  “It's  in  IT’s  best  interest  to 
find  out  what's  going  on  and  offer  a  sanctioned  alternative.” 


Best 

Practices 

Find  out  what's  out 
there.  Learn  which  Web  2.0 
tools  business  users  have 
adopted  and  what  kinds  of 
data  flow  to  them.  You  need 
to  know  the  reality  of  users’ 
needs  before  you  can  craft 
policy. 

Establish  boundaries. 

Decide  what’s  appropriate 
and  what’s  not  within  apps 
like  wikis,  blogs  and  IM.  This 
might  mean  shutting  down 
information  flow  to  certain 
applications  for  compliance 
and  risk  reasons. 

Develop  a  policy  to  pro¬ 
vide  authorized  alternatives. 
Don’t  take  away  business 
users’  Web  2.0  tools  without 
giving  them  an  alternative— 
perhaps  an  app  secured 
behind  a  firewall  or  one 
delivered  via  SaaS.  Robust 
tools  have  emerged  in  this 
area,  and  you  can  easily  pilot 
test  them  with,  say,  50  to 
100  users.  -C.G.L. 
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Wikis  and  Blogs  and  RSS,  Oh  My! 


IT  LEADERS  SAY: 

SO  WHAT  ARE  YOU  WAITI NG  FOR? 

“1  seethe  business 

“My  workers 

“1  have  made  a  formal 

“I’m  considering 

value  in  Web  2.0 

already  use 

investment  in  those 

making  an 

applications” 

them” 

technologies” 

investment” 

89% 

15% 

27% 

16% 

SOURCE:  Forrester  Research 
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IN  NOW 

THAT  NEW  CAR 
SMELL  CANT 
GET  ANY  NEWER 


'•  %  T'/  V.  T"' 
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EDS  is  helping  GM 
streamline  product 
development  and  integrate 
purchasing  and  supply 
chain  activities  so  new 
models  like  the  Saturn 
AURA  can  be  delivered  to 
market  faster  than  ever 
before.  Find  out  more  at 
areyoureadyfornow.com 


III  ARE  YOU  READY  FOR  NOW? 
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solid  state  reliability 


Introducing  the  new  Samsung  Flash  Solid  State  Drive  (SSD). 

No  moving  parts,  except  some  hardworking  electrons.  A  mean  time 
between  failures  (MTBF)  six  times  longer  than  a  hard  drive.  Virtually 
unlimited  shock  resistance.  And  power  use  that  extends  battery  life 
up  to  20%.  With  a  Samsung  SSD  inside  your  notebook,  your  data  is 
always  there  when  you  need  it. 


Samsung  Solid  State  Drive 

A  new-generation  Flash  drive  available 
in  notebooks  from  leading  OEMs. 

endurance  (MTBF^)  >  over  2  million  hours 

-  - - -c-ViA. 

shock  resistance  >  1500G  /  0.5ms 


read  speed  >  100MB /sec 

write  speed  >  80MB  /  Sec 


www.samsungssd.com 


active  power  consumption  <  0.5W 

system  boot  speed^  <  24  sec 

operating  temperature  -25C  ~  85C 


’Mean  Time  between  Failure 

'HP  NX9420,  XP  Pro,  Core  Duo  Processor  2.0Ghz.  512MB  RAM.  ICH  7,  i945  Chipset 
©  2007  Samsung.  All  rights  reserved. 
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For  better  deals 
and  stronger 
relationships, 
combine  IT, 
legal  and 
procurement 
experts 
in  a  vendor 
management 
office 


Getting  Your  Vendors  to 
Flock  Together 

BY  GALEN  GRUMAN 

VENDOR  MANAGEMENT  |  Keeping  track  of  bids,  vendor  performance,  previous 
contract  terms,  alternative  providers  and  technology  differences  was  taking  too  much  time 
for  Bernard  “Bud”  Mathaisel  as  he  settled  in  as  CIO  of  electronics  manufacturer  Solectron 
in  1999.  Many  of  Solectron’s  vendors  were  also  customers,  which  just  complicated  the  job 
politically.  Seeking  a  more  disciplined  approach,  Mathaisel  partnered  with  Solectron’s 
assistant  procurement  officer,  Jeff  Dixon,  to  create  a  virtual  vendor  management  office 
(VMO)  staffed  by  IT  and  procurement  employees.  “The  result  is  that  the  CIO  could  be  a 
decision  maker  without  having  to  run  the  process,”  Mathaisel  says.  Now  CIO  of  manufac¬ 
turing  outsourcer  Achieve,  Mathaisel  brought  that  discipline  with  him. 

Likewise,  Dixon  has  brought  it  to  Cisco  Systems,  where  he  is  now  director  of  enterprise 
software  and  outside  services  for  IT  vendor  management  services.  “We  take  care  of  the 
trees  and  let  the  CIO  focus  on  the  forest,”  Dixon  says. 

Dixon  estimates  a  tenfold  return  in  the  staffing  investments  of  a  vendor  manage¬ 
ment  entity— from  better  deals  through  consolidated  purchasing,  and  from  avoiding 
the  costs  of  straightening  out  piecemeal  or  short-term  deals  later.  “That  doesn’t  even 
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count  the  intangible  benefits,  such  as 
having  a  flexible  contract  or  reducing 
supplier  risk,”  Dixon  adds.  Following  a 
similar  approach,  Accenture  CIO  Frank 
Modruson  calculates  that  his  company 
has  experienced  significant  savings. 

Creating  a  formal  vendor  manage¬ 
ment  office  is  smart,  says  Marc  Cecere, 
a  VP  at  Forrester  Research,  yet  many 
enterprises  have  not  done  so.  A  July 
2006  Forrester  survey  showed  that  47 
percent  had  some  sort  of  formal  vendor 
management  groups— but  90  percent 
of  the  rest  had  no  intention  of  doing  so. 
Such  enterprises  risk  being  at  the  mercy 
of  savvier  vendors,  he  warns. 

Most  enterprises  underestimate  the 
need  to  actively  manage  their  vendors, 
concurs  Judith  Hurwitz,  president  of 
consultancy  Hurwitz  &  Associates. 
Their  IT  staffs  often  lose  the  perspective 


needed  to  ensure  they’re  getting  the  best 
value  from  the  relationship,  she  says,  as 
the  emotional  connections  nurtured  by 
the  vendor  take  hold.  “That’s  why  the 
vendors’  salespeople  are  paid  so  much,” 
she  notes. 

Why  Bother  With  a  VMO? 

With  a  vendor  management  office,  your 
goal  should  not  be  to  create  a  firewall 
between  IT  and  the  vendor,  using  a 
procurement  group  as  a  proxy,  but  to  be 
smart  and  consistent  within  the  enter¬ 
prise  about  managing  multiple  aspects 
of  any  vendor  relationship.  That’s  why 
a  formalized  approach  that  combines  IT, 
procurement  and  legal  people  makes 
sense,  says  Joe  Pucciarelli,  program 
director  for  technology  financing  and 
management  strategies  at  IDC  (a  sister 
I  company  to  CIO’s  publisher). 


At  many  enterprises,  the  CIO  has  de 
facto  responsibility  for  managing  IT 
vendors,  but  the  day-to-day  reality  is 
that  individual  departments,  technol¬ 
ogy  platform  owners  and  project  offices 
manage  vendors  for  their  local  needs, 
perhaps  tapping  into  corporate  procure¬ 
ment  and  legal  staff  for  some  of  the  tacti¬ 
cal  contracts  and  pricing  analysis.  That 
can  work  in  smaller  companies  with  a 
small  number  of  vendors,  where  the 
CIO  or  a  few  IT  execs  can  keep  the  infor¬ 
mation  in  their  heads,  Cecere  says. 

CIO  Dan  Demeter  doesn’t  want  a  ven¬ 
dor  management  organization  outside 
the  CIO’s  domain  at  talent  management 
firm  Korn/Ferry  International.  “They 
tend  to  treat  IT  sourcing  as  they  do 
buying  toilet  paper,”  focusing  on  price 
and  not  understanding  the  underlying 
technology  issues  that  affect  IT’s  ability 


to  serve  business  needs,  he  says.  “If  you 
give  [vendor  management]  away,  you 
really  take  away  a  lot  of  the  control,  not 
just  over  prices  and  contract  terms  but 
over  the  relationship  and  support.” 

But  Demeter  says  that  CIOs  of  large 
organizations  need  vendor  manage¬ 
ment  because  of  their  scale.  “It’s  essen¬ 
tial  because  of  all  the  technical  details,” 
he  says,  citing  his  previous  experience 
at  Citibank. 

The  changing  nature  of  technology 
procurement— from  hardware  and 
packaged  software  to  provisioning  of 
infrastructure,  software  and  business 
processes  as  services— also  supports  the 
use  of  a  more  formal  vendor  manage¬ 
ment  approach  that  crosses  departmen¬ 
tal  boundaries,  says  Rob  Watkins,  CIO 
of  food  management  company  Compass 
Group,  The  Americas  Division.  “As  you 


of  large 
enterprises 
have  a  vendor 
management 
group. 

SOURCE:  Forrester  Research 


have  more  outsourcing  providers  that 
cross  departments,  there’s  an  oppor¬ 
tunity  to  manage  these  relationships 
strategically,”  he  says. 

Integrated  Management 

You  don’t  want  to  make  IT  vendor  man¬ 
agement  only  an  IT  function  or  only  a 
separate  corporate  function,  says  Dan 
McNicholl,  chief  strategy  officer  for 
General  Motors’  IT  organization.  “You 
need  to  balance  the  competing  goals, 
specialty  skills  and  the  broad  relation¬ 
ship,”  he  says. 

Among  several  ways  to  institute 
a  formal  vendor  management  orga¬ 
nization,  the  most  common  choice  is 
a  virtual  approach:  Here,  you  assign 
procurement  and  legal  staff  to  IT  ven¬ 
dor  management,  and  use  IT  “account 
managers”  to  coordinate  all  aspects  of 
specific  vendor  relationships  and  IT 
“scouts”  to  assess  technology  and  mar¬ 
ket  trends  that  may  change  need§  later. 

With  this  arrangement,  you  maintain 
the  typical  client  relationships  with  the 
vendor,  such  as  having  engineers  work 
with  vendor  support  staff.  “The  vendor 
management  needs  to  be  ingrained  at  all 
levels,”  says  GM’s  McNicholl,  and  then 
coordinated. 

Although  some  CIOs  worry  that 
procurement  staff  only  want  to  squeeze 
the  last  nickel  from  a  vendor,  Achievo’s 
Mathaisel  believes  they  bring  real  value 
to  the  vendor  management  process.  “You 
gain  a  rigor  and  a  discipline  that  financial 
people  naturally  have,”  he  says. 

It  makes  more  sense  to  create  a  vir- 


“If  CIOs  give  vendor  management 
away,  you  take  away  a  lot  of  control 
over  prices,  contract  terms,  the 
relationship  and  support.” 

-CIO  Dan  Demeter,  Korn/Ferry  International 
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1.  Dual-Core  is  a  new  technology  designed  to  improve  performance  of  multithreaded  software  products  and  hardware -aware  multitasking  operating  systems  and  may  require  appropriate 
operating  system  software  for  full  benefit;  check  with  software  provider  to  determine  suitability;  not  all  customers  or  software  applications  will  necessarily  benefit  from  use  gf  .tliis  technology. 
Intel's  numbering  is  not  a  measurement  of  higher  performance.  Intel,  Intel  logo,  Intel  Inside,  Intel  Inside  logo  and  Intel  Xeon  are  trademarks  or  registered  trademarks  of  Inter  Corporation 
or  its  subsidiaries  in  the  United  States  and  other  countries.  L.P.  Microsoft  and  Windows  are  registered  trademarks  of  Microsoft  Corporation  in  the  United  States  and/or.  ot|)er_  countries. 
©2007  Hewlett-Packard  Development  Company,  L.P.  The  information  contained  herein  is  subject  to  change  without  notice.  ’  ,  >' 

,  '■  - 


Experience  a  utopian  world  of  storage.  Visit  hp.com/go/storageutopia6 

1-800-888-0306 


Alternative  Thinking  About  Storagi 


STORAGE  UTOPIA 

IS  NOT  A  MYTH 

Imagineastorageenvironmentthat'ssimple,  straightforward 
and  virtually  effortless.  The  HP  StorageWorks  1 200  All-in-One 
Storage  System  lets  you  manage  your  ever-growing  data 
using  a  simple  Windows®  application,  in  a  language  you 
already  know.  Call  it  utopia,  nirvana,  or  just  plain  easy. 

Technology  for  better  business  outcomes. 


Powered  by  fhe  Dual-Core  Intel®  Xeon"'  Processor'  ^ 


“I  am  fearless. 


I  am  CSO  for  a  major 


telecommunications  company, 

I  protect  more  than  just  data. 

I  secure  our  brand 
and  our  reputation. 

I  know  confidence 
drives  innovation. 


I  am  fearless 


Secure  Enterprise  Data.  When  it  comes  to  security,  most  businesses  understand  what  it  means  to  fail. 
But  few  can  imagine  what  it  would  mean  to  succeed.  RSA’s  information-centric  security  solutions  can  move 
your  business  forward.  That’s  why  we’re  the  chosen  security  partner  of  more  than  90  percent  of  the 
Fortune  500.  Don’t  just  secure  your  business.  Accelerate  it.  Learn  more  at  www.rsa.com/go/windsurf 


The  Security  Division  of  EMC 


Secure  Anytime  Protect  Secure  Manage  Compliance 

Anywhere  Access  Customer  Identities  Enterprise  Data  and  Security  Information 

©2007  RSA  Security  Inc.  All  rights  reserved.  RSA  and  the  RSA  logo  are  either  registered  trademarks  or  trademarks  of  RSA  Security  Inc.  in  the  United  States  and/or  other  countries. 

All  other  products  and  services  mentioned  are  trademarks  of  their  respective  companies. 
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tual  office  than  to  establish  a  VMO  as 
its  own  department,  Mathaisel  says. 

'  For  one  thing,  financial  and  legal  staff 

can  rotate  through  the  virtual  group  as 
part  of  their  career  development  while 
maintaining  a  career  path  in  their 
departments,  he  notes.  These  staff¬ 
ers  often  end  up  learning  new  skills 
that  help  them  move  into  compliance 
activities  when  they  return  to  finance, 
Mathaisel  says.  IT  staff  often  have  the 
same  concerns.  But  when  it’s  safe  to 
take  on  vendor  management  roles,  the 
IT  staffers  often  find  new,  unexpected 
opportunities,  he  says. 

Not  every  vendor  or  deal  gets  the 
attention  of  a  vendor  management 
office— nor  should  it,  says  Gary  Plot- 
kin,  CIO  of  The  Hartford’s  financial  ser¬ 
vices  property  and  casualty  division. 
The  goal  is  not  to  build  a  bureaucracy 
but  to  devote  management  resources 
to  those  relationships  that  have  the 
most  impact  or  potential  impact  on 
enterprise  strategy,  he  says.  At  The 
Hartford,  Plotkin  has  a  threshold  of 
several  hundred  thousand  dollars  to 
determine  what  vendor  relationships 
are  managed  through  the  formal  ven¬ 
dor  management  process.  There’s  good 
reason  to  set  thresholds  of  spend,  says 
Accenture’s  Modruson:  “The  rigor  costs 
money,  so  you  want  to  be  proportional 
to  the  spend.” 

The  Hartford  assigns  an  IT  man¬ 
ager  to  each  vendor  that  surpasses  the 
I  threshold.  “That’s  the  go-to  person,” 
Plotkin  says.  Some  vendors  whose 
business  volume  is  very  large  get  a 
i  senior  vendor  relationship  manager, 
j  such  as  Plotkin  or  one  of  his  depu- 
!  ties,  assigned  to  them  as  well.  A  CIO 
or  CTO  can  work  directly  with  a  ven- 
I  dor’s  CEO  or  CTO  in  a  way  that,  say,  a 


Advice  for  Mid-Market  CIOs 


How  can  you  get  more  from  vendors 
when  you're  not  the  biggest  customer? 

See  TIPS  FOR  TRAINING  YOUR  TECH 
VENDORS,  www.cio.com/article/117858. 

cio.com 

WWW 


network  operations  manager  can’t,  so 
having  multiple  relationship  levels  is 
important,  Plotkin  says. 

Achievo’s  Mathaisel,  GM’s  McNich- 
oll,  Cisco’s  Dixon,  Compass’s  Watkins 
and  Accenture’s  Modruson  follow  the 
same  basic  model  as  The  Hartford’s 
Plotkin. 

More  Benefit  to  Come 

Although  enterprises  that  have  a  for¬ 
mal  vendor  management  group  clearly 
gain  both  monetary  and  strategic 
advantages,  IDC’s  Pucciarelli  believes 
there’s  still  more  value  to  be  had— from 
better  management  tools.  “The  biggest 
procurement  analysis  infrastructure 
in  IT  is  Excel,”  he  says.  Some  useful 
technologies  in  place  for  supply  chain 
management  are  now  being  adopted 
for  IT  vendor  management,  Pucciarelli 
says.  He  expects  more  offerings  in  the 
next  five  years. 

But  technology  can  only  support 
your  people  and  process,  he  adds. 
“You  need  a  team  that  steps  back  and 
understands  the  business  value,”  con¬ 
curs  consultant  Hurwitz. 

Why  haven’t  more  enterprises  for¬ 
malized  their  vendor  management 
practices?  Some  fear  that  top-down 
control  will  lead  to  excesses,  such  as 
confusing  initial  price  savings  with 
long-term  value,  says  Forrester’s 
Cecere.  And  some  companies  are  too 
small  or  have  too  few  vendors  to  need 
more  than  a  CIO’s  focus  on  the  issue, 
he  says. 

Others  don’t  see  vendors  as  entities 
to  manage  strategically,  says  Achievo’s 
Mathaisel;  “If  you  want  a  master/slave 
relationship  with  your  vendor,  this 
is  a  waste  of  time.”  The  remaining 
enterprises  should  reconsider  their 
opposition  to  the  idea  of  formal  ven¬ 
dor  management,  he  says;  “it  is  very 
much  worth  the  effort.”  BQ 


Galen  Gruman  can  be  reached  atggruman@ 
zangogroup.com.  To  comment  on  this  arti¬ 
cle,  go  to  www.cio.com/author/41292. 
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Fear  less.  Do  more. 

Secure  Enterprise  Data 

Data  is  your  company’s  greatest  asset. 
The  accidental  loss,  manipulation  or 
theft  of  data  is  your  greatest  risk.  RSA 
can  help  minimize  that  risk  with  a  data 
security  strategy  based  on  your  regu¬ 
latory  and  business  drivers.  Because 
the  more  confident  you  are  in  your 
data,  the  more  confident  your  cus¬ 
tomers  are  in  you. 

RSA  can  help  your  organization; 

•  Discover  and  monitor  your 
sensitive  data 

•  Apply  appropriate  enforcement 
policies 

•  Facilitate  reports  and  audits  to 
insure  policy  compliance 

•  Simplify  data  security  management 


Learn  to  fear  less  and  do  more. 

Download  “Best  Practices 
to  Prevent  Enterprise  Data  Loss' 
white  paper  at 
www.rsa.com/go/windsurf 


The  Security  Division  of  EMC 


©2007  RSA  Security  Inc.  All  rights  reserved.  RSA  and  the 
RSA  logo  are  either  registered  trademarks  or  trademarks 
of  RSA  Security  Inc.  in  the  United  States  and/or  other 
countries.  All  other  products  and  services  mentioned 
are  trademarks  of  their  respective  companies. 
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Strategy  With  Oomph 

Rule  One:  Never  approach  strategy  making  as  a  purely  analytical  exercise 


f  you  had  to^  which  would  you  choose:  to  be  a  great  strategic 

thinker  or  a  great  strategy  maker?  The  answer  follows  the  same  logic  as 
the  question  “Would  you  rather  be  smart  or  rich?” 

Most  agree  that  it’s  better  to  be  smart  than  rich  since  smart  people  can  typi- 


i  cally  make  money,  but  dumb  lasts  forever.  Likewise,  being  gifted  with  a  strategic 
I  mind- set  is  worthless  without  the  ability  to  mobilize  organizational  commitment 


around  the  resulting  strategy. 

When  CIOs  are  challenged  with  developing  a 
strategy,  I  see  time  and  time  again  the  tendency  to 
approach  strategy  making  as  an  analytical  rather 
than  an  emotional  process.  As  a  result,  there  is  more 
focus  on  ensuring  the  right  content  than  the  right 
commitment. 

To  illustrate  this  point,  let’s  take  a  look  at  the 
typical  IT  approach  to  strategy  making.  Either  by 
calendar  or  inclination,  the  CIO  decides  it  is  time  to 
develop  a  strategic  plan.  She  tasks  one  of  her  bright¬ 
est  staff  members  to  make  it  happen  within  the  next 
three  months.  The  staffer  solicits  the  input  of  the 
other  IT  leaders  and  defines  a  scope  that  is  chal¬ 
lenging  but  doable  within  the  prescribed  time  line. 
Broad  participation  is  required,  of  course,  so  the 
staffer  arranges  for  the  CIO  to  announce  the  initia¬ 


tive  as  one  of  the  organization’s  top  priorities  and 
to  attend  the  launch  meeting. 

Now,  the  strategy-making  process  begins.  The 
plan  calls  for  joint  business-IT  strategy  making  to 
define  the  business  context  and  the  implications  to 
IT-enabled  capabilities.  Once  there  is  a  good  under¬ 
standing  of  the  needs  of  the  business,  the  process 
will  shift  to  defining  how  to  meet  those  needs— from 
a  technology  and  an  organization  perspective.  It  all 
makes  perfect  sense  until  theory  meets  reality:  gain¬ 
ing  broad  participation  within  the  defined  scope 
and  time  line  will  be  impossible— everybody  is  just 
too  busy. 

So  the  staffer  makes  a  critical  (and  fatal)  decision: 
to  shift  from  strategy  facilitator  to  strategy  doer. 
This  way,  the  strategy  will  be  completed  on  time  to 
serve  as  input  to  the  financial  planning  process. 
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Today's  IT  Leaders  on  Market  Trends 

Business  Service 
Management 

Making  the  Alignment  of  IT  and  Business  a  Reality 


IT  management  is  undergoing  a  transformation  that’s 
driven  by  the  goal  of  managing  IT  to  business  priori¬ 
ties.  Under  pressure  to  demonstrate  business  value,  be 
innovative  and  act  in  a  more  strategic  capacity,  IT  lead¬ 
ers  must  unify  and  optimize  their  heterogeneous  and  re¬ 
source-intensive  infrastructures  to  ensure  that  services  are 
reliable  and  high-performing  and  to  cost-effectively  enable 
business  growth. 

Instead  of  spending  hours  fire¬ 
fighting  at  the  infrastructure  level, 

CIOs  must  focus  on  managing  services, 
assets  and  resources  based  on  business 
goals  and  user  expectations.  The  end 
result?  Internal  customers  are  more  sat¬ 
isfied,  more  IT  resources  are  freed  up 
for  strategic  projects,  and  IT  is  able  to 
deliver,  measure  and  support  the  ser¬ 
vices  that  continue  to  generate  revenue 
for  the  company. 

The  rise  of  best-practice  frameworks  such  as  the  IT 
Infrastructure  Library  (ITIL®)  has  set  the  stage  for  organi¬ 
zations  to  make  headway  on  these  fronts.  ITIL  is  becom¬ 
ing  the  de  facto  standard  for  service  management.  Indeed, 
more  than  40  percent  of  100  U.S. -based  businesses  recent¬ 
ly  surveyed  by  IDG  Research  Services  are  adopting  it.  For 
the  most  part,  ITIL  describes  what  needs  to  be  done  to  im¬ 
prove  service,  but  it  does  not  explain  how  to  do  it.  The  fact 
that  over  20  percent  of  respondents  adopting  ITIL  say  that 
their  experience  has  not  yet  met  their  expectations  makes 
it  clear  that  there  are  difficulties: 

•  ITIL  processes  are  complex  and  difficult  to  interpret; 

•  ITIL  is  a  journey  that  many  organizations  under¬ 
take  without  a  firm  idea  of  their  goals  and  the  path  to 
achieve  those  goals; 

•  Adopt  a  single  ITIL  process  and  mature  it  before 


moving  on  rather  than  approaching  ITIL  with  inter-con¬ 
nectivity  among  processes  in  mind. 

According  to  the  ITIL  Service  Management  Prac¬ 
tices®*,  Business  Service  Management  (BSM)  is  defined 
as  “an  approach  to  the  management  of  IT  Services  that 
considers  the  business  processes  supported  and  the  busi¬ 
ness  value  provided.”  BSM  provides  the  methods  and  tools 
for  managing  the  lifecycle  of  a  service 
across  the  IT  enteprise.  The  IDG  sur¬ 
vey  finds  that  71  percent  of  respon¬ 
dents  say  their  organizations  place  a 
high  or  critical  priority  on  enabling  IT 
to  manage  service  assets  and  resources 
based  on  business  priorities  and/or  user 
expectations.  For  60  percent  of  those 
who  assign  a  moderate  to  critical  prior¬ 
ity  to  this  task,  IT  business  alignment 
is  driving  that  commitment. 

But  enterprises  struggle  with  this 
alignment.  Only  38  percent  report  that  they  are  effective 
or  very  effective  in  enabling  IT  to  prioritize  based  on  busi¬ 
ness  needs.  About  half  the  respondents  report  their  efforts 
are  only  somewhat  effective,  and  for  1 3 
percent  of  companies,  the  situation  is 
much  worse. 

Given  the  changes  to  people,  pro¬ 
cesses  and  technology  that  organizations 
must  make  to  manage  services  to  busi¬ 
ness  goals,  it  is  no  surprise  that  when 
it  comes  to  achieving  this  ideal,  the  in¬ 
dustry  is  still  low  on  the  maturity  curve. 

More  than  half  the  survey  respondents 
say  they  are  not  ready  to  implement 
BSM,  and  another  26  percent  question 
their  preparedness. 
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Today's  IT  Leaders  on  Market  Trends 


The  Challenges  of  Mapping  to  Business  Priorities 

The  foundation  of  BSM  is  a  consolidated,  correlated 
and  automated  infrastructure  that  can  be  optimized  to 
deliver  business-driven  services.  Companies  that  embrace 
BSM  map  their  applications  and  infrastructure  around  ser¬ 
vices,  so  that  changes  that  can  create  business  disruptions 
are  avoided — or  scheduled  for  a  time  when  their  impact 
is  minimal.  They  automate  key  IT  policies  to  eliminate 
the  “human  error”  quotient,  and  monitor  systems  so  that 
corrective  measures  are  taken  before  users  notice  any  deg¬ 
radation  in  business  services.  They  constantly  measure  and 
continually  optimize  services  based  on  business  impact. 

Companies  are  eager  to  achieve 
BSM’s  benefits  but  are  aware  of  its 
challenges.  Nearly  half  the  respondents 
cite  technology  integration  as  an  obsta¬ 
cle  to  enabling  IT  to  manage  services, 
assets  and  resources  based  on  business 
priorities,  and  42  percent  are  trying 
to  overcome  difficulties  with  mapping 
business  goals  to  the  way  IT  works.  Forty-one  percent  can’t 
even  define  what  are  their  business  goals. 

The  work  that  goes  into  implementing  a  configura¬ 
tion  management  database  (CMDB) — a  database  used  to 
store  configuration  information  including  the  dependen¬ 
cies  and  relationships  to  deliver  IT  services  throughout  their 
lifecycle — is  a  good  example  of  technical  and  process  chal¬ 
lenges.  It  has  been  difficult  for  organizations  to  define  the 
configuration  data  for  a  business  service  that  will  sit  within 
the  CMDB,  and  to  define  which  data  sources  to  link  to  for 
a  holistic  view  of  services  and  dependencies.  Nearly  half  the 
respondents  say  they  are  in  the  CMDB  planning  process, 
while  one-third  are  concerned  about  upgrading  monitor¬ 
ing  software  so  that  it  can  feed  data  into  the  system. 

Pursuing  the  Dream  of  IT  and  Business  Alignment 

BSM  includes  improvements  to  the  entire  service 
supply  chain,  from  servicing  users  to  the  supporting  in¬ 
frastructure.  To  realize  the  benefits  of  BSM,  companies 
must  plan  initiatives  that  bring  a  service-oriented,  process- 
driven  approach  to  achieve  infrastructure  optimization, 
data  center  automation,  service  quality  management  and 
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service  portfolio  delivery.  Companies  may  have  individual 
plans,  but  all  will  include  these  core  goals: 

•  change  control,  providing  a  360-degree  view  of  the 
service  through  a  unified  service  model  to  control  changes 
and  to  expedite  root-cause  analysis 

•  infrastructure  optimization  to  measure  service  qual¬ 
ity  based  on  user  success  and  service  level  commitments. 

Because  of  the  ongoing  nature  of  BSM  initiatives,  it 
will  be  important  for  IT  organizations  to  measure  progress 
using  business  metrics.  It  is  also  important  to  show  incre¬ 
mental  service  improvement  wins  to  business  executives, 
enabling  them  to  make  the  case  for  more  BSM-related 
funding.  The  work  is  challenging. 

“Adopting  BSM  is  a  significant 
commitment  for  IT  since  it  impacts 
not  just  technology,  but  also  the  way 
people  work  and  the  processes  they 
employ,”  says  Sarah  Meyer,  director  of 
Business  Service  Management  at  CA, 
one  of  the  world’s  largest  IT  manage¬ 
ment  software  companies.  “IT  management  software  ven¬ 
dors  also  have  had  to  commit  to  a  paradigm  shift  to  reori¬ 
ent  their  offerings  to  solutions  that  create  value  by  helping 
organizations  provide  business-driven  services.” 

There  is  no  question  that  this  is  a  complex  undertak¬ 
ing.  Enterprises  are  looking  to  vendors  such  as  CA,  and 
to  system  integration  partners,  to  develop  and  implement 
blueprints  based  on  thoughtful  assessments  of  the  organi¬ 
zation’s  goals,  priorities  and  current  state. 

The  end  result — unified  end-to-end  IT  service  man¬ 
agement  that  delivers  IT  services  linked  to  business  im¬ 
peratives — will  justify  the  hard  work.  Businesses  that  do  it 
right  will  free  up  time,  money  and  resources  to  focus  on 
strategic  innovations — and  do  a  better  job  in  delivering 
reliable  services  that  enable  competitiveness. 

Go  to  www.cio.com/whitepapers/ca-bsm 

to  obtain  a  free  download  of  the  white  paper  “Business  Service 
Management:  Meeting  Business  Objectives.  ’’Based on  a  major 
research  survey  by  IDG  Research  Services,  this  paper  features 
in-depth  discussions  with  CIOs  and  draws  on  peer  insights  to 
help  Cl  Os  move  toward  greater  IT  and  business  alignment. 

ITII*  is  a  registered  trade  mark  and  a  registered  Community  Trademark  of  the  Office  of 
Government  Commerce,  and  is  registered  in  the  U.S.  Patent  and  Trademark  Office. 

•Crown  Copyright.  Reproduced  with  permission  of  Office  of  Government  Commerce. 
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I  one-  No  one  can  ''do"  strategy 
I  for  someone  else.  It's  a  leader's 
I  job  and  one  that  is  done  collec- 
I  tively^  not  individually. 

In  the  doer  mode,  the  staffer  conducts  interviews  externally 
and  internally  and  drafts  a  document  that  meets  the  original 
scope.  The  CIO  presents  the  strategy,  and  staff  members  nod 
their  heads  and  get  back  to  business. 

Unfortunately,  a  lot  of  effort  was  expended  but  little  strat¬ 
egy  was  made.  The  acid  test  of  strategy  is  whether  it  informs 
and  constrains  decision  making  by  compelling  leaders  to  align 
their  functional  goals  and  day-to-day  decision  making  to  the 
goals  of  the  enterprise.  The  only  way  to  accomplish  this  is 
through  communication  and  collaboration. 

However,  the  process  of  aligning  people’s  hearts  and  minds 
is  a  difficult  one  that  requires  ongoing  group  discussion  and 
wrangling.  No  one  can  “do”  strategy  for  someone  else.  It’s  a 
leader’s  job  and  one  that  is  done  collectively,  not  individually. 

Let’s  help  our  staffer  out  and  rewind  our  scenario  to  the  point 
where  it  was  clear  that  the  strategy  process  was  going  to  fail. 
What  does  the  staffer  need  to  do?  He  needs  to  open  a  discussion 
with  the  CIO  and  other  IT  leaders  about  how  to  complete  this 
iteration  of  the  strategy.  Of  course,  what  we  are  talking  about  is 
reducing  scope  by  identifying  the  critical  one  or  two  issues  that 
need  to  be  addressed  (for  example,  how  to  provide  a  360  degree 
perspective  of  the  customer  across  the  enterprise). 

While  we  are  helping  out,  let’s  also  advise  the  CIO  that  she 
abdicated  her  strategy-making  responsibilities  by  delegating 
them  to  the  staffer.  The  accountability  for  strategy  making  is 
not  a  staff  role  but  a  leadership  one.  Leaders  need  to  pave  the 
way  with  their  business  counterparts  and  leadership  team 
and,  in  turn,  hold  them  accountable  for  making  strategy  with 
their  staff  and  partners. 

Let’s  also  encourage  our  staffer  and  make  sure  he  under- 
j  stands  that  he  has  an  important  role  in  strategy  making.  Staff 
resources  should  be  used  for  defining  and  managing  the  pro¬ 
cess,  coaching  others  through  it,  and  integrating  and  oversee¬ 
ing  the  results  to  ensure  focus  and  quality. 

Those  who  are  strategically  gifted  have  a  tendency  to 
emphasize  the  quality  of  the  idea  over  the  quality  of  the  com¬ 
mitment.  Never  approach  strategy  making  as  a  purely  analyti¬ 
cal  exercise  or  trade  off  gaining  emotional  commitment  in  the 
quest  to  “get  it  right”  or  “get  it  done.” 

Strategy  is  never  done.  In  the  process  of  shaping  and  inform¬ 
ing  future  decision  making,  it  also  must  change  to  account  for 
the  new  learning  that  occurs  as  those  decisions  are  translated 
into  action. 
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Reader  Q&A 

Q:  How  can  we  create  a  strategic  thinking  organiza¬ 
tion  where  everyone  understands  the  strategic  posi¬ 
tion  and  how  to  contribute  to  it? 

A:  Those  at  the  top  must  lead  by  example  by  demon¬ 
strating  strategic  thinking  skills  and  creating  oppor¬ 
tunities  for  others  to  get  involved  and  learn  through 
experience.  Relevant  skills  include  visioning,  creating 
new  opportunities  by  reframing  challenges  or  ideas 
and  translating  concepts  so  they  can  be  heard  by  oth¬ 
ers.  A  collaborative,  ongoing  strategy- making  and 
objectives-setting/monitoring  process— one  that  starts 
at  the  top  and  cascades  down— can  go  a  long  way  in 
creating  an  organization  where  all  parties  understand 
the  strategy  position  and  how  they  can  support  it. 


Q:  My  CIO  asked  me  to  take  on  strategic  planning 
with  our  business  unit  managers  but  they  do  not  take 
me  seriously  in  this  role;  several  have  declined  my 
planning  meetings.  How  can  I  talk  to  my  CIO  about 
laying  the  groundwork  with  his  peers? 

A:  Assuming  you  are  in  a  staff  role,  it  sounds  like  your 
CIO  is  trying  to  get  you  to  do  the  work  that  he  and  the 
rest  of  his  line  IT  leaders  should  be  doing.  Instead  of 
focusing  externally  on  the  business  partners,  focus 
internally  and  facilitate  agreement  with  the  CIO  and 
other  IT  leaders  regarding  how  strategy  should  be 
made  and  what  their  involvement  is  in  the  process.  Part 
of  this  process  will  call  for  business  partners  to  make 
strategy  with  the  IT  leaders  they  already  know  and 
trust  due  to  past,  productive  working  relationships. 
It’s  impossible  for  anybody,  including  the  CIO,  to  confer 

this  credibility  to 
you.  Be  cautioned 
that  if  your  IT 
organization  has 
trouble  deliver¬ 
ing,  business 
partners  will  be 

reluctant  to  participate  in  strategy  making.  If  this  is 
the  case,  drop  the  word  strategy,  get  the  CIO  and  IT 
leaders  engaged  in  defining  the  issues  and  get  busy 
building  credibility  by  addressing  business  partner 
concerns.  BQ 


Susan  Cramm  is  founder  and  president  of 
Valuedance,  an  executive  coaching  firm  in 
San  Clemente,  Calif.  You  can  e-mail  feed¬ 
back  to  susan@valuedance.com. 
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We  are  convinced  that  without  freedom  of  action,  there  can  be  no  ambition.  As  a  worldwide 
leader  in  consulting,  technology  services  and  outsourcing,  we  help  you  to  transform  your 
energies  into  tangible  results.  To  move  forward.  And  because  your  problem  is  unique,  the 
solution  will  be  too:  we  work  together  to  find  the  best  answer  for  you.  We  call  this  way  of 
working  together  the  Collaborative  Business  Experience.  What  we’re  known  for.  It  brings 
greater  flexibility,  reactivity  and  creativity,  qualities  that  determine  your  performance. 
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What  Women  Want 

I  More  young  women  would  choose  careers  in  enterprise  IT  if  CIOs  would 
!  marketthem  as  business,  not  technology  jobs 


i 


henever  a  journalist  asks  whether  or  why  women 

hate  IT,  grumps  trot  out  the  usual  laundry  list  of  cliches 
and  stereotypes  about  women’s  supposed  genetic  disposition 
against  math  and  science,  the  lack  of  role  models  or  the  profes¬ 
sion’s  geeky  image.  It  is  a  problem  that  more  women  are  not  choosing  technology 
careers,  but  I  think  we’ll  solve  it  only  if  we  start  asking  the  right  question:  Why 


I 


i 

I 

j 
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should  women  want  to  be  in  IT? 

Enterprise  IT  is  a  fantastic  field  for  women, 
especially  young  women,  to  consider,  especially 
now.  Why?  Because  much  of  the  work  capitalizes 
on  women’s  greatest  strengths— communication, 
collaboration  and  problem  solving— and  because  a 
looming  worker  shortage  means  the  supply-demand 
balance  will  tip  toward  more  frenzied  recruit¬ 
ing.  But  ask  CIOs  whether  they  think  the  field  is 
adequately  marketed  and  correctly  described,  and 
they  admit  that  it  suffers  from  an  outdated  image, 
inadequate  promotion  and  misperceptions  about 
exactly  what  the  work  is. 

Mixed  Messages 

One  of  the  biggest  reasons  why  women  don’t  choose 
careers  in  enterprise  IT  is  that  the  field  is  poorly 


defined.  Does  anyone  know  what  the  heck  we  are 
talking  about  when  we  say  IT?  Is  it  the  software 
industry  a  la  Microsoft,  technology  consulting, 
game  design,  mapping  software,  database  manage¬ 
ment,  hardware  or  chip  design?  Or  is  it  the  field  of 
professionals  who  provide  the  infrastructure,  appli¬ 
cations,  technology  operations  and  strategy  that 
enable  today’s  enterprises  to  function  and  change? 

Advocates  for  boosting  the  number  of  women  in 
this  large  and  amorphous  tech  world  (including  pro¬ 
fessional  organizations  like  Women  in  Technology 
International,  the  Anita  Borg  Institute  for  Women 
and  Technology,  and  the  National  Center  for  Women 
&  Information  Technology)  inadvertently  blur  this 
distinction.  They  want  to  boost  the  presence  and  stat¬ 
ure  of  technical  women  across  the  board:  women  in 
computing,  women  in  science  and  engineering,  and 
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PRESENTING  THE  NEW  TOUGHBOOK  52.  When  you  engineer 
a  laptop  as  nnonumental  as  the  new  Panasonic  Toughbook®  52, 
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built  to  stand  the  test  of  time— it  boasts  a  magnesium  alloy  case, 
shock-mounted  hard  drive  and  a  spill-resistant  keyboard.  Factor 
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You  need  business  analysts^  program 
managers^  relationship  managers^  informa¬ 
tion  architects  or  process  analysts.  These 
jobs  demand  enmioyees  with  excellent  com¬ 
munication  skills  that  many  of  the  women 
you  know  have. 


girls  who  are  interested  in  math 
and  science.  To  get  girls  excited 
about  the  fun  of  tech,  they  talk 
about  science  fairs  and  robotics. 

For  the  sake  of  discussion,  let’s 
call  that  wing  of  the  profession 
computer  engineering. 

I  agree  that  attracting  more 
girls  and  women  is  a  must  for 
the  technical  workforce  that  invents 
new  tools,  games,  devices,  software 
and  hardware  (to  be  used  and  con¬ 
sumed  by,  among  others,  women).  But 
this  emphasis  on  programming,  robot¬ 
ics,  computer  science  and  engineering 
won’t  get  women  interested  in  working 
for  your  IT  organization.  In  fact,  it  is 
exactly  that  tech  focus  that  obscures  the 
true  nature  of  enterprise  IT  jobs  (which 
we’ll  call  business  technology)  and  the 
background  and  skills  necessary  to 
excel  at  them. 

Business  technology  needs  candi¬ 
dates  from  a  broad  range  of  undergrad¬ 
uate  and  graduate  curricula  who  want 
to  learn  how  companies— not  comput¬ 
ers— work;  who  can  work  with  a  global 
project  team,  rather  than  with  program¬ 
ming  languages;  and  who  can  see  busi¬ 
ness  process  linkages,  rather  than  map 
out  electronic  connections. 

Meanwhile,  the  collection  of  jobs  that 
saddled  business  technology  with  its 
geeky  image— network  and  data  center 
administration,  code  maintenance,  pro¬ 
gramming  and  help  desk— may  soon  be 
centralized,  automated  or  offloaded  to 
outsourcers.  The  stereotypically  inar¬ 
ticulate  men  with  pocket  protectors  who 
hold  these  jobs— and  who  defined  the 
image  of  the  profession  way  back  in  the 
’70s— will  soon  retire  en  masse  (taking 
with  them  their  pocket  protectors). 

Now  you  need  business  analysts,  pro- 


Does  IT  Hate  Women? 


For  an  answer,  read  CAREERS:  WHY  I.T. 

HATES  WOMEN  (AND  THE  WOMEN  WHO  STAY 
ANYWAY)  at  www.cio.com/article/30528. 
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gram  managers,  relationship  managers, 
information  architects  or  process  ana¬ 
lysts.  These  jobs  (any  of  which  can  lead 
to  CIO)  demand  employees  with  excel¬ 
lent  communication  skills  that  many  of 
the  women  you  know  have:  the  ability  to 
speak,  negotiate,  influence  others,  write, 
analyze,  manage  projects  or  programs 
and  lead  cultural  change.  These  jobs  are 
not  about  writing  operating  systems  or 
learning  programming  languages.  They 
are  about  helping  companies  change 
the  way  they  work.  “Driving  changes 
that  help  the  business  generate  more 
revenue,  lower  cost  or  improve  cus¬ 
tomer  service— cracking  these  busi¬ 
ness  problems— that’s  fun!”  says  June 
Drewry,  CIO  of  the  Chubb  Group  of 
Insurance  Companies. 

So  how  do  we  dispel  the  stereotype? 
With  better  information  about  what 
business  technology  really  is  and  how 
women  of  a  variety  of  backgrounds  are 
successful,  and  finally,  with  the  explicit 
support  and  engagement  of  the  86  per¬ 
cent  of  top  IT  executives  who  are  men. 

The  Case  for  Women  in 
Business  Technology 

Let’s  look  realistically  at  the  business 
technology  field  and  why  senior  women 
in  IT  should  be  promoting  this  career  to 
young  women: 

Salaries  are  going  to  climb.  There 
may  be  as  many  as  1  million  net  new  IT 
jobs  by  2014,  taking  into  account  baby 
boomer  retirement.  Enterprises  will  be 
desperate  to  get  candidates,  and  salaries 
will  rise. 

Business  technology  jobs  are  already 
among  the  highest  paying  in  the  United 
States.  Furthermore,  at  the  highest  levels 


of  the  profession,  women  make  the  same 
money  as  men.  According  to  a  recent 
survey  by  Sheila  Greco  Associates, 
the  average  base  salary  for  CIOs  in  the 
mid- market  for  both  men  and  women  is 
$150,000  to  $200,000.  At  Fortune  500 
companies  it  ranges  from  $450,000  to 
more  than  $1.5  million.  The  median 
pay  for  all  managers  is  $105,000,  and 
median  base  salaries  for  all  business  IT 
jobs  have  edged  up  for  the  first  time  in 
several  years  (although  in  the  middle  of 
the  range,  women’s  average  salaries  are 
somewhat  lower  compared  to  men). 

Companies  want  a  diverse  work¬ 
force.  It  makes  no  sense  to  have  an 
enterprise  where  the  percentage  of 
women  is  demographically  representa¬ 
tive  in  other  departments— accounting, 
sales,  service,  HR,  marketing— but  not 
in  IT  where  the  numbers  are  shrink¬ 
ing.  So  recruiters  are  looking— and  will 
continue  to  look— for  women  to  fill  open 
IT  jobs,  even  when  faced  with  mostly 
male  applicants. 

Meanwhile,  says  Cheryl  Smith, 
former  CIO  at  McKesson,  “Corporate 
diversity  goals  will  make  managers 
even  more  willing  to  promote  qualified 
women  once  they  have  recruited  them 
onto  the  payroll.” 

Enterprise  IT  is  about  business, 
not  just  technology.  These  jobs  offer  a 
unique  vantage  point  for  learning  how 
companies  work,  says  Patty  Morrison, 
CIO  of  Motorola. 

“I  have  a  liberal  arts  degree  in  math 
and  a  secondary  education  degree,”  says 
Morrison.  “I  started  out  [doing]  market 
analysis  for  Procter  &  Gamble  about 
what  sells  soap,  then  went  into  market 
research,  and  then  into  IT.”  Michelle 
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Move  to  the  future  with  the  hardware  you've  got. 

When  moving  to  VoIP,  ripping  and  replacing  used  to  be 
the  only  way.  Now,  it's  the  out-of-date  way.  That's  because 
it's  no  longer  about  hardware.  It's  actually  about  software.  Now 
you  can  keep  your  hardware — your  PBX,  your  gateways,  even 
your  phones.  Simply  move  to  VoIP  with  software.  Software  that 


integrates  with  Active  Directory^  Microsoft®  Office,  Microsoft 
Exchange  Server,  and  your  PBX.  Maximize  your  current  PBX 
investment  and  make  it  part  of  your  new  software-based 
VoIP  solution  from  Microsoft.  You're  much  closerto  VoIP  than 
you  realize.  Learn  more 
at  microsoft.com/voip 
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...which  is  why  we  are  committed  to  bringing  you  innovation, 
expertise,  and  the  nation's  best  talent. 

TEKsystems®  is  proud  to  have  earned  a  reputation  for  offering 
unparalleled  technology  expertise.  In  fact,  as  a  leading 
technology  services  company,  our  commitment  to  creating 
and  upholding  the  highest  standards  is  only  exceeded  by 
our  passion  to  satisfy  customers  through  superior  service. 

Deploying  expertise  with  the  right  skills  and  methodology 
to  manage  complex  technology  implementations  is  our 
primary  goal.  We  constantly  challenge  ourselves  to  build 
upon  our  robust  portfolio  of  services,  and  deliver  top-tier  talent 
capable  of  implementing  virtually  any  form  of  technology. 

Visit  us  at  www.teksystems.com  for  more  information, 
or  call  888-835-7978  to  arrange  to  meet  with  an  account 
manager. 

people  YOU  CAN  trust,  results  you  can  count  on. 
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Instead  of  worrying  about  the  low 
levels  of  computer  science  enrollment^ 
get  the  word  out  to  women  in  colleges 
with  business  programs. 


McKenna,  CIO  of  Universal  Orlando, 
started  as  a  certified  public  accountant 
and  worked  in  marketing  and  sales 
before  moving  into  IT. 

IT  jobs  enable  work-life  balance. 
Women  in  senior  positions  are  mobile 
professionals  who  can  command  flex¬ 
ible  work  schedules.  Eileen  Gabriel, 
former  CIO  of  Dick’s  Sporting  Goods, 
says,  “My  experience  is  that  if  you  were 
talented,  you  could  write  your  own 
ticket,  and  even  put  some  balance  in 
your  life.  When  I  was  raising  my  chil¬ 
dren,  I  could  always  work  other  hours 
to  make  up  for  day  hours.”  Women 
who  have  IT  jobs  that  are  measured 
by  deliverables— such  as  requirements 
analyses,  project  updates  or  vendor 
contract  analyses— know  that  it  isn’t 
when  or  where  you  do  the  work,  but 
the  work  itself  that  matters  most. 

How  to  Change  IT’s  Image 

Both  male  and  female  executives  need 
to  stop  bemoaning  the  lack  of  women  in 
IT  and  start  changing  the  profession’s 
outdated  image.  We  can  begin  to  update 
this  image  by  promoting  a  business 
technology  emphasis  in  the  workplace. 
CIOs  and  senior  managers  can  help 
techcentric  staffers  to  learn  more  about 
business,  enabling  them  to  work  more 
effectively  with  the  other  departments 
in  their  firms  and  identify  the  career 
paths  that  may  zigzag  to  and  from  the 
business  areas  of  their  firms. 

Find  new  sources  of  entry-level  tal¬ 
ent.  Instead  of  worrying  about  the  low 
levels  of  computer  science  enrollment, 
it  would  be  a  better  idea  to  get  the  word 
out  to  women  in  undergraduate  busi¬ 
ness  schools  and  liberal  arts  colleges 
with  business  programs.  There,  we 
can  find  young  women  who  are  sharp. 


articulate  speakers  and  writers  with 
the  ability  to  learn  about  business  and 
technology.  Recruit  them  as  interns, 
and  show  them  from  the  inside  where 
an  enterprise  IT  career  can  take  them. 
Assign  them  mentors  who  will  shep¬ 
herd  them. 

Market  business  technology 
careers  to  young  women.  As  part 
of  the  process  of  promoting  the  field, 
recruiting  firms  and  HR  departments 
should  profile  women  business  tech¬ 
nology  executives  who  can  inspire 
young  women  to  choose  a  career  that 
is  as  much  or  more  about  business  as 
it  is  about  technology.  The  material, 
which  should  be  distributed  to  high 
school  girls  and  college  freshmen,  can 
highlight  the  exciting  work  experi¬ 
ences  these  women  have  had. 

I  have  been  thinking  about  what  else 
(besides  a  brochure  and  video  inter¬ 
view  with  an  IT  exec)  to  put  in  the  kit 
for  high  school  guidance  counselors  to 
help  a  young  girl  get  excited  about  the 
world  of  business,  business  processes 
and  change.  Perhaps  we  can  give  them 
an  information-based  problem  to  solve 
like  organizing  and  recruiting  for  a 
new  hobby  group  among  registered 
online  club  members.  That  would  help 
our  daughters  see  themselves  working 
in  business  technology.  What  do  you 
think  would  help?  QEl 


Laurie  M.  Orlov  researches  and  consults 
on  business  and  technology  strategy.  She 
is  a  former  vice  president  and  principal 
analyst  at  Forrester 
Research.  Reach  her  at 
laurie.  orlov@gma  il.com. 

To  comment  on  this  arti¬ 
cle,  go  to  www.cio.com/ 
article/139550. 
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How  CIOs  in  Mid-Sized 
Enterprises  Can  Close 
the  IT  Knowledge  Gap 


TEKsystems'  Thought  Leadership  Series 
White  Paper  -  Summer  2007 


"Surprisingly,  there  appears 
to  be  a  significant  knowledge 
gap  on  what  it  takes  to  be  a 
successful  CIO  in  a  mid-sized 
enterprise." 


As  the  premier  provider  of  Technology 
Execution  services,  we  offer  expertise 
to  thousands  of  CIOs  everyday.  It  is  a 
privilege  to  support  organizations  of 
all  sizes,  and  in  this  capacity,  we've 
uncovered  some  significant  evidence 
suggesting  CIOs  in  mid-sized  enterprises 
are  simply  not  receiving  their  fair  share 
of  attention. 

Understanding  your  business  as 
insiders— recognizing  the  resource  and 
financial  restraints  CIOs  must  work 
around  to  get  their  jobs  done— is  what 
makes  such  insights  especially  valuable. 
To  learn  more,  view  our  white  paper  online 
at  http://whitepaper.teksystems.com. 

Our  goal  is  to  become  a  valuable 
contributor  to  your  business.  And  our 
Thought  Leadership  Series  is  one  more 
way  to  demonstrate  that  commitment 
to  you. 

http://whitepaper.teksystems.com 
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Promote  project  management  credentials  and  a  formal  career  path. 

Project  Management  Institute  helps  you  build  strong  teams  and  best  business  practices 
by  certifying  the  experience  and  knowledge  of  your  workforce.  And  our  formal  career 
path  helps  you  retain  and  promote  your  brightest  stars.  A  recognized  way  from  the  world’s 
leading  project  management  resource  to  increase  productivity,  efficiency  and  profitability. 

Accelerate  your  business  results  with  project  management.  Visit  us  at  PMI.org/advantage. 
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RECALL 

There  have  been  more  product  recalls  lately  than  ever  before. 

Will  your  supply  chain  be  ready  when  you  have  to  run  it 
backward  in  order  to  track,  trace  and  col  lect  a  recal  led  product? 
It  had  better  be.  Your  company’s  future  may  depend  on  it. 


BY  KIM  S.  NASH 


Reader  ROI 

::  Howto  limit  a  recall’s 
cost  and  scope 

::  What  supply  chain 
systems  are  needed 
for  recall  efficiency 

::  Why  the  frequency  of 
recalls  is  increasing 


AT  LUNCHTIME  ONE  DAY  LAST  JANUARY, 

Jill  Hein,  an  Iowa  mother  of  eight,  took  a  jar  of 
Peter  Pan  peanut  butter— the  kind  with  Peter,  in 
his  feathered  cap,  on  the  label— out  of  her  pantry. 

She  opened  the  lid.  Everything  seemed  fine.  No 
funny  odor.  No  odd  color. 

Hein  fed  the  Peter  Pan  to  one  son 
and  one  daughter.  Within  hours,  they  were 
cramping  and  vomiting.  Hein’s  3-year-old 
boy,  Bowen,  had  to  be  taken  to  the  emergency 
room  the  next  day.  Hein  ate  some  herself 
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two  weeks  later  and  was  hospitalized  for 
dehydration.  And  renal  failure. 

Alone  or  with  jelly,  peanut  butter  is  as 
classic  as  Elvis,  who  preferred  his  on  white 
bread,  mashed  with  bananas  and  fried. 
Americans  eat  700  million  pounds  of 
crunchy  and  creamy  each  year— enough, 
the  Peanut  Advisory  Board  says,  to  coat 
the  floor  of  the  Grand  Canyon. 

Hein  never  expected  a  simple  peanut 


butter  sandwich  to  go  so  wrong  and  nei¬ 
ther  did  ConAgra  Foods,  the  $12  billion 
conglomerate  that  makes  Peter  Pan. 

One  of  ConAgra’s  oldest  and  best- 
known  brands,  Peter  Pan  brought  in  $109 
million  in  sales  last  year,  says  Information 
Resources,  which  tracks  retail  spending. 
ConAgra  also  supplies  some  of  Wal- 
Mart’s  Great  Value  house  brand  and  sells 
peanut  butter  toppings  to  companies  like 


Carvel  and  Sonic,  bringing  total  peanut 
butter  sales  to  $147  million  last  year.  But 
when  an  outbreak  of  a  rare  salmonella 
strain  was  traced  to  ConAgra  peanut 
butter,  the  company  would  have  to  try  to 
get  it  all  back. 

The  Peter  Pan  recall  eventually 
involved  326  million  pounds  of  its  own 
and  Wal-Mart’s  peanut  butter,  plus 
99,953  cases  of  toppings.  So  far,  ConAgra 
has  spent  more  than  $78  million  deal¬ 
ing  with  an  estimated  $1  billion  worth  of 
potentially  infected  product.  Its  peanut 
butter  sales  were  down  63  percent  in  fis¬ 
cal  2007. 

No  one  knows  how  much  ConAgra 
will  need  to  spend  to  re-establish  trust 
in  its  product.  Hiring  Tinker  Bell  to  ask 


The  ugliness  of  bad  data  management  really 
hits  you  when  you  have  a  product  recall.” 
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Traditional  security  measures  aren’t  defending  your  business  from  costly  breaches. 
Only  enterprise  data  protection  focuses  on  what  matters  most:  your  data. 


It  happens  all  the  time.  Moreover,  IT  executives 
can  no  longer  ignore  it.  All  it  takes  is  a  lost 
laptop  or  USB  flash  drive,  a  disgruntled  or 
criminal  employee,  or  a  breach  to  some  other  part 
of  your  security  efforts,  and  critical  data  about  your 
business,  your  partners,  or  your  customers  is  in  the 
wrong  hands.  The  direct  costs  can  be 
substantial,  but  the  indirect  costs  —  brand 
damage  and  loss  of  business  —  can  be  even 
worse.  What’s  most  frightening  is  that 
these  kinds  of  scenarios  are  now 
commonplace,  yet  the  forces  arrayed 
against  IT  security  only  seem  to  grow  more 
potent  each  day. 

Georges  Clemenceau,  the  prime 
minister  of  France  during  World  War  I, 
once  warned,  “War  is  too  important  to  be  left  to  the 
generals.  ”  One  can  say  the  same  thing  regarding 
enterprise  security.  With  the  data  at  the  heart  of 
every  business  under  threat,  security  is  too 
important  to  be  left  to  traditional  approaches  such  as 
firewalls  and  intrusion  prevention  systems.  Instead 
of  merely  building  fences  and  patrolling  perimeters, 
organizations  are  discovering  that  protecting  data  in 
the  modern  enterprise  requires  a  comprehensive 
approach:  Enterprise  Data  Protection. 

Enterprise  Data  Protection  integrates 
technologies  that  manage  data,  control  data  access, 
detect  data  at  risk  and  protect  data.  With  Enterprise 
Data  Protection,  security  is  built  in,  starting  with 
data  creation  and  following  data  as  it  is  modified, 
transferred,  stored,  and  archived.  At  the  core  of  this 
approach  is  the  protection  of  data  using  encryption, 
everywhere  it  goes. 

Why  encrypt?  Data  is  vulnerable  when 
traditional  access  barriers  fail,  either  through  an 
insider  or  an  outside  party.  Then,  customer  data. 


partner  data,  and  your  data  move  beyond  your 
control.  A  recent  study  conducted  by  The  Ponemon 
Institute  found  that  data  losses  and  security  breaches 
caused  extensive,  measurable  and  far-ranging  costs  at 
31  representative  companies.  Total  costs  averaged 
$182  per  lost  customer  record,  and  the  average  total 


cost  per  reporting  company  was  $4.8  million  per 
breach,  rising  to  a  high  of  $22  million. 

That’s  why  data  security  must  be  built  in. 
Enterprise  Data  Protection  is  four  technology 
solutions  working  together: 

•  Protecting  Data  — •  Standards-based  encryption 
enables  a  data-centric  approach  to  security. 
Encryption  locks  down  and  remains  with  data 
wherever  it  goes,  making  it  accessible  only  to 
authorized  users. 

•  Detecting  Risk  —  Solutions  for  data-leakage 
prevention  search  for  data  at  risk,  identify  risks,  and 
help  IT  executives  develop  strategies  to  mitigate 
exposure  and  enforce  policies. 

•  Controlling  Access  —  Authentication,  including 
hardware  tokens/smart  cards  and  identity 
management,  ensures  that  only  authorized  users  can 
access  data. 

•  Managing  Data  —  Data  must  be  available  and 
redundant  throughout  its  lifecycle.  Storage 
management,  backup,  and  archive  solutions  provide 
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a  layer  that  helps  keep  data  accessible  even  in  the 
event  of  a  disaster  or  system  malfunction. 

Building  on  these  data  management  and  access 
controls,  Enterprise  Data  Protection  secures  your 
data  by  identifying  any  data  at  risk  and  automat¬ 
ically  embedding  data  protection. 

And  it  works.  For  example,  as  part  of  its 
commitment  to  protecting  customer  privacy,  H&R 
Block,  the  tax-preparation  industry  giant,  decided 
that  encryption  technology  from  PGP  was  critical 
to  achieving  its  Enterprise  Data  Protection  strategy. 
“From  a  compliance  standpoint,  we  have  a 
significant  number  of  regulatory  and  corporate 
compliance  drivers,  including  IRS  guidelines,  the 
Gramm-Leach-Bliley  Act,  plus  California  Senate 


company,  we  promise  our  customers  that  we’ll  keep 
their  information  private.  We  need  to  make  sure  we 
keep  this  vow  because  otherwise,  we  risk  losing  the 
customer’s  trust,”  say  Ken  Juneau,  AVP,  Director  of 
Distributed  Systems. 

Encryption  Makes  Enterprise  Data  Protection  Work 

Encryption  answers  the  challenge  of  balancing 
productivity  and  security.  Although  encryption  of 
one  kind  or  another  has  been  a  part  of  information 
technology  practices  for  a  long  time,  it  is  just  now 
entering  mainstream  usage.  Compelled  to  meet 
industry  and  government  regulations  and  the 
expectations  of  customers  and  partners,  businesses 
of  all  kinds  now  find  that  only  encryption  offers  the 


As  new  security  risks  and  threats  develop,  the  inherent  protection  of  data  encryption 
reduces  the  need  to  rush  to  implement  a  patchwork  of  inefficient  fixes. 


Bill  1386  and  similar  breach- notification  laws  in 
more  than  30  states,”  says  Dr.  Daniel  Fluke,  senior 
project  manager  at  H&R  Block.  His  team  took  a 
straightforward  approach  to  tackling  the  problem, 
implementing  fully  automated  encryption  for 
branches  and  knowledge  workers. 

Meeting  the  Business  Challenge 

It’s  ironic  that  the  things  that  make  business  data  so 
vulnerable  —  powerful  productivity  applications  and 
mobility  —  are  the  very  things  that  CIOs  recognize  as 
crucial  to  business  success.  Today,  employees  have  access 
to  more  data,  more  often,  than  ever  before.  And  they  use 
it  to  stay  competitive.  However,  according  to  the  recent 
Yankee  Group  Report,  “Zen  and  the  Art  of  Rogue 
Employee  Management”,  enterprise  IT  is  facing  a 
potentially  hazardous  mix  of  secured  and  unsecured 
applications  in  the  enterprise  as  consumer  products 
such  as  instant  messaging  and  personal  computing 
devices  gain  popularity  and  escape  oversight  by  IT. 
In  this  environment,  traditional,  “siloed”  approaches 
to  security  are  both  costly  and  ineffective. 

The  challenge:  how  to  keep  employees 
productive  and  creative  —  able  to  access  data  when 
and  where  they  want  it  —  while  still  maintaining 
and  even  strengthening  security. 

A  user  of  the  PGP®  Encryption  Platform, 
American  National  Insurance  Company  (ANICO) 
faces  this  challenge  each  day.  “As  an  insurance 


security  wherever  data  goes.  That  capability  is  why 
the  core  of  any  Enterprise  Data  Protection  strategy 
is  the  protection  of  data  with  seamless,  transparent 
and  automatic  encryption,  applied  immediately, 
wherever  and  whenever  needed. 

“Today,  security  is  an  integral  part  of  the 
basic  IT  infrastructure,”  says  Thomas  Goschiitz, 
CTO  Corporate  Center,  at  global  media  company 
Bertelsmann.  His  company  has  made  security  an 
integral  part  of  its  business  strategy  and  focuses 
on  protecting  data  to  reduce  enterprise  risk. 
“From  an  enterprise  perspective,  the  protection  of 
the  information  itself  has  become  important,” 
says  Goschiitz. 

With  data  security  built  in,  IT  can  continually 
develop  new,  more  proactive,  redundant  means  of 
protecting  data  for  particular  applications.  As  new 
security  risks  and  threats  develop,  the  inherent 
protection  of  data  encryption  reduces  the  need  to 
rush  to  implement  a  patchwork  of  inefficient  fixes. 
Both  end  users  and  administrators  become  more 
productive,  because  data  remains  accessible  and 
built-in  security  thwarts  new  threats.  Most 
importantly.  Enterprise  Data  Protection  strategies 
marry  policy  and  protection,  improving  the 
possibility  of  achieving  comprehensive  audit  and 
regulatory  compliance. 

Central  to  this  approach  is  the  use  of 
encryption,  which  provides  the  most  fundamental 
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level  of  data  security,  substituting  cryptographically 
secured  data  for  unprotected  data. 

Continental  Corporation,  a  leading 
automotive  industry  supplier  based  in  Germany, 
relies  on  mobile  data  but  understands  the  risks  it 
presents.  The  company  has  selected  the  PGP 
Encryption  Platform  to  secure  proprietary  and 
confidential  information.  It  has  implemented  PGP 
Universal™  Server  for  centralized  management  of 
its  encryption  applications.  It  is  also  rolling  out 
PGP  Whole  Disk  Encryption  to  protect  its  mobile 
data.  Thomas  Ullrich,  chief  security  officer  at 
Continental,  noted,  “Today’s  notebooks  are  small, 
are  taken  outside  the  company’s  perimeters,  and 
potentially  contain  sensitive  data  such  as  financial 
reports,  personnel  information,  or  technical 
blueprints.  We  decided  we  needed  to  protect  all 
6,000  laptops  in  the  global  enterprise.” 

Although  encryption  might  sound  complex 
or  daunting,  in  the  case  of  PGP  solutions,  it  is 
anything  but.  PGP  solutions  automatically 


centrally  managed  solution.  This  approach  controls 
policy  and  data  access  without  requiring  end  users  to 
make  enforcement  decisions,  and  it  relieves  adminis¬ 
trators  of  complicated,  resource-intensive  tasks.  This 
comprehensive  approach  also  increases  usability.  It 
unites  security  and  data  and  eliminates  the  risks 
associated  with  manual  security  decision  making. 

Inside  Enterprise  Data  Protection 

Enterprise  Data  Protection  consists  of  four  comple¬ 
mentary  solutions  working  together  to  protect, 
detect,  access  and  manage  your  data. 

At  the  core  of  Enterprise  Data  Protection  is  the 
need  to  protect  data  itself.  Standards-based 
encryption  is  the  key  to  a  data-focused  approach  to 
security.  Encryption  locks  down  and  follows  data 
wherever  it  goes,  making  it  accessible  only  to 
authorized  users.  Centralized  management  with 
automated  key  and  policy  management  enables 
scalability  of  enterprise  data  protection.  This 
approach  makes  encryption  interoperable. 


Enterprise  Data  Protection  automatically  detects  when  data  is  at  risk  and  secures  data  using 
persistent  protection,  which  works  inside  and  outside  the  enterprise. 


protect  data  when  an  employee  creates  a 
spreadsheet  on  a  desktop  system  inside  the 
company  firewall  or  at  a  remote  location  on  a 
company  laptop.  PGP  solutions  locally  encrypt 
information.  Similarly,  when  teams  collaborate 
remotely,  policies  allow  only  authorized  users 
access  to  encrypted  data. 

Data  protection  extends  beyond  traditional 
enterprise  perimeters.  For  instance,  if  a  spreadsheet 
containing  sensitive  customer  data  is  mistakenly  or 
maliciously  sent  to  an  outside  party,  the  enterprise 
data  protection  system  detects  a  potential  data 
breach.  With  enterprise  data  protection,  data 
leakage  prevention  solutions  can  enforce  corporate 
security  policies  to  automatically  encrypt  sensitive 
files  to  authorized  recipients.  Messages  remain 
encrypted  while  stored  on  recipient  email  servers  or 
when  downloaded  to  laptops. 

Enterprise  Data  Protection  automatically 
detects  when  data  is  at  risk  and  secures  data  using 
persistent  protection,  which  works  inside  and 
outside  the  enterprise.  And  the  easiest  way  to 
implement  Enterprise  Data  Protection  is  with  a 
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transparent  to  users,  and  flexible  enough  to  respond 
as  new  data  security  needs  emerge.  Enterprise  data 
management  also  ensures  that  data  is  accessible 
today  and  in  the  future,  as  required  by  data 
retention  policies. 

Then,  as  data  moves  in  and  out  of  the 
enterprise,  data-leakage  prevention  solutions — the 
detect  function — search  for  data  at  risk.  From  this 
process,  IT  decision  makers  can  adjust  their 
strategies  to  reduce  exposure. 

Authentication  tools,  including  hardware 
tokens  or  smart  cards  and  identity  management 
solutions,  have  a  role,  ensuring  proper  access  so  that 
only  authorized  individuals  reach  the  data.  Strong 
authentication  can  play  an  important  role  through 
to  the  “protect”  layer. 

Ensuring  business  continuity  requires  that 
data  is  available  and  redundant  throughout  its  life 
cycle,  from  creation  to  archive.  This  manage 
function  includes  storage  management,  backup  and 
archive  solutions  to  ensure  the  efficient  use  of 
storage  and  access  to  data  in  the  event  of  a  disaster 
or  system  malfunction. 
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Strategic  Approach:  The  PGP  Encryption 
Platform  and  Enterprise  Data  Protection 

To  help  business  stay  competitive,  IT  organizations 
must  participate  in  how  organizations  design  new 
operational  models,  diversify  globally,  and  develop 
closer  relationships  up  and  down  the  value  chain  to 
achieve  greater  profitability.  At  the  same  time,  IT  is 
responsible  for  increasing  system  security  to  meet 
compliance  requirements  and  protect  brand  equity. 
The  PGP  Encryption  Platform  is  the  foundation  of 
Enterprise  Data  Protection.  The  PGP  Encryption 
platform  allows  businesses  to  cost-effectively  deploy 
and  manage  multiple  encryption  applications, 
saving  capital  and  human  resources  for  other  value- 
added  activities.  This  strategic  approach  to 
encryption  as  noted  in  the  “Encryption  and  Key 
Management”  report  from  Aberdeen  Research, 
increases  data  protection  while  reducing  mistakes 
and  operational  inefficiencies. 

The  PGP  Encryption  Platform  and  integrated 
applications  differ  from  other  encryption  approaches, 
including  suites  or  sets  of  applications.  With  the  PGP 
Encryption  Platform,  businesses  can  select  from  a 
range  of  centrally  managed  encryption  solutions  and 


deploy  and  maintain  these  applications,  and  reduces 
the  overall  investment  needed  for  effective 
information  security.  In  addition,  key  management 
is  automated  and  built-in  across  multiple 
applications,  ensuring  a  seamless  user  experience 
while  protecting  corporate  access  to  encrypted  data. 

Security:  Too  Important  to  Ignore 

Policy,  automation  and  encryption  are  essential  for 
successful  enterprise  data  protection.  Inconsistently 
applied  or  ill-defined  policies  may  differ  across 
applications  or  users,  forcing  administrators  to 
focus  reducing  the  level  of  risk  mitigation.  Over  the 
long  term,  the  direct  costs  associated  with  managing 
multiple  applications  and  the  indirect  costs  of  lost 
productivity  can  outweigh  even  the  potential 
financial  consequences  of  a  data  breach. 

Regardless  of  the  business  driver,  encryption  is 
fundamental  to  protecting  data  wherever  it  goes. 
Whether  lost  or  stolen,  encrypted  data  is  useless  to 
anyone  but  an  authorized  user,  even  if  someone 
violates  access  controls.  This  level  of  critical 
protection  is  why  more  than  30  U.S.  states  provide 
safe  harbor  from  mandated  consumer  notification 


In  countries  such  as  the  U.K.,  where  the  need  for  breach  mitigation  is  just  emerging,  protecting 
brand  and  reputation  is  the  major  reason  that  enterprises  adopt  encryption  solutions. 


build  a  comprehensive  encryption  strategy  on  a  single 
platform.  Based  on  unified  key  management  and 
policy,  the  PGP  Encryption  Platform  offers  the 
broadest  set  of  integrated  applications  for  enterprise 
data  security.  The  platform  enables  organizations  to 
meet  current  needs  and  expand  as  security 
requirements  change  for  email,  laptops,  desktops, 
instant  messaging,  PDAs,  FTP,  bulk  data  transfers, 
backups,  and  shared  files  on  network  storage.  By 
implementing  the  PGP  Encryption  Platform,  organi¬ 
zations  can  reduce  security  infrastructure  complexity, 
lower  maintenance  costs,  and  realize  a  strong  return 
on  investment. 

In  contrast  to  traditional,  “siloed”  approaches 
to  security,  which  tend  to  incur  growing  costs  from 
acquisition  through  to  deployment  and 
maintenance,  the  PGP  Encryption  Platform 
simplifies  deployment  of  multiple,  centrally 
managed  encryption  applications.  This  capability 
decreases  the  incremental  cost  and  effort  required  to 


in  the  event  of  a  data  breach  involving  encrypted 
data.  In  countries  such  as  the  U.K.,  where  the  need 
for  breach  mitigation  is  just  emerging,  protecting 
brand  and  reputation  is  the  major  reason  that 
enterprises  adopt  encryption  solutions. 

Just  as  war  is  too  important  to  be  left  to  the 
generals,  security  is  too  important  to  be  left  to  the 
hodgepodge  methods  of  yesterday.  The  Enterprise 
Data  Protection  approach  led  by  PGP 
Corporation  now  allows  IT  staff  to  focus  on 
business  needs  without  making  security  a  separate 
project  or  an  afterthought.  Instead,  security  is 
built  in:  protecting,  detecting  risk,  controlling 
access,  and  managing  data.  As  tbe  foundation  of  a 
comprehensive,  strategic  enterprise  data 
protection  solution,  PGP  encryption  solutions 
protect  data.  H 

For  more  information  on  enterprise  data  protection, 
go  to:  www.pgp.com/edp 
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IT  Outsourcing  Services  from  Accenture. 

You're  offshoring.  Now  what?  Sure,  you're  driving 
down  labor  costs,  but  are  you  addressing  the  total 
cost  of  ownership?  Are  you  using  IT  to  help  drive 
high  performance? 

The  pressure  is  still  on.  The  business  is  demanding 
more  from  IT.  IT  outsourcing  from  Accenture 
aims  to  fundamentally  enhance  the  overall  service 
model,  while  simultaneously  delivering  innovative, 
business-changing  strategies  that  can  make  a 
company  more  nimble  and  competitive. 


Application  Outsourcing: 

•  Application  Development  > 

•  Enhancements  and  Upgrades 

•  Maintenance  and  Support 

•  Testing  Services 

•  Capacity  Services 

•  Portfolio  Optimization 

•  Comprehensive  Service  Management 


Infrastructure  Outsourcing 

•  IT  Spend  Management 

•  Data  Center  Services 

•  Service  Desk 

•  Security  Services 

•  Communication  Services 

•  Workplace  Services 


To  learn  more  about  IT  outsourcing  from  Accenture, 
visit  accenture.com/outperform 


Outsourcing  from  Accenture^  V*' 
can  help  you  outperform  expectations.  " 

And  if  you're  seriously  dedicated  to  achieving 
enduring  performance  improvement,  isn't  it 
a  combination  worth  exploring?  For  more, 
visit  accenture.com/outperform 


It's  much  more  than  conventional  outsourcing, 
It's  cost  savings  plus  performance  gains. 
It's  practical  insights  plus  strategic  perspective 
It's  the  bottom-line  benefits  of  outsourcing 
multiplied  by  a  top-line  strategic  outlook 
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Supply  Chain  Management 


people  to  clap  if  they  believe  in  Peter 
Pan  won’t  fix  this. 

Why  Recalls  Depend  on 
the  Supply  Chain 

Peanut  butter  isn’t  ConAgra’s  only 
recall  trouble,  either.  The  company 
has  had  to  recall  hundreds  of  pounds 
of  ground  beef  in  the  past  few  years, 
and  last  month  ConAgra’s  Banquet 
pot  pies  were  recalled  when  at  least 
211  people  in  the  U.S.  got  salmonella 
poisoning,  which  the  Centers  for  Dis¬ 
ease  Control  and  Prevention  links  to 
the  pot  pies.  That  recall  is  ongoing. 

But  it’s  not  just  ConAgra.  Recalls 


AMR  Research  in  Boston.  So  if  recalls 
are  inevitable,  a  CIO  must  help  create 
a  supply  chain  ready  to  cope  with 
them,  she  says,  by  quickly  providing 
the  relevant  data  to  facilitate  the  pro¬ 
cess.  And  a  recall  conducted  under 
pressure  from  federal  regulators,  an 
angry  public  and  plaintiff’s  lawyers 
tests  every  supply  chain  management 
decision  a  CIO  makes. 

Best  practice  calls  for  companies  to 
be  able  to  track  and  trace  the  pedigree 
and  whereabouts  of  the  raw  materi¬ 
als  used  to  make  their  products  all 
the  way  through  the  manufacturing 
process  and  out  to  end-point  custom¬ 


“If  you  can’t  tell  it  was  this  production  line 
on  this  shift  on  these  days,  then  you’re 
doing  an  expansive  recall  just  to  be  safe.” 

-CIO  FERNANDO  GONZALEZ,  BYER  CALIFORNIA 


are  blooming  like  flowers  in  spring: 
Dole’s  e.coli  bagged  salads;  Metz 
Fresh’s  salmonella  spinach;  REI’s 
faulty  children’s  bikes;  Mattel’s  lead- 
painted  and  choking-hazard  toys,  just 
to  name  a  few.  Federal  records  show 
at  least  628  recalls  so  far  this  year, 
and  another  941  in  2006.  (For  a  his¬ 
tory  of  famous  recalls,  see  “Recalling 
Through  the  Years,”  Page  48.)  Glo¬ 
balization  accounts  for  some  of  this 
surge.  Many  U.S.  companies  depend 
on  overseas  production,  where  quality 
controls  are  difficult  to  monitor.  And 
it’s  not  just  hard  goods  like  toys  from 
China.  Food,  too,  arrives  by  container 
ship  from  other  countries,  and  some¬ 
times  it’s  contaminated.  So  far  this 
year,  for  example,  more  than  8,660 
cartons  of  cantaloupe  from  Costa 
Rica  have  been  recalled  for  salmonella 
risks,  according  to  U.S.  Food  and  Drug 
Administration  (FDA)  records. 

But  mainly,  things  go  wrong.  That’s 
business.  That’s  life. 

“One  risk  every  company  faces  is  a 
recall,”  says  Jane  Barrett,  an  analyst  at 


ers,  says  Steve  David,  former  CIO  of 
Procter  &  Gamble.  But  many  compa¬ 
nies,  for  many  reasons,  don’t  have  sup¬ 
ply  chains  that  can  do  that,  and  that 
becomes  evident  in  clumsy  recalls  that 
go  on  too  long,  cost  too  much,  and  have 
the  potential  to  damage  corporate  and 
product  reputations. 

“The  ugliness  of  bad  data  manage¬ 
ment  really  hits  you  when  you  have  a 
product  recall,”  David  says. 

As  soon  as  the  decision  is  made  to 
recall  a  product,  companies  should 
release  consistent,  correct  information 
to  minimize  brand  damage,  says  Joe 
Barkai,  a  practice  director  at  Manufac¬ 
turing  Insights,  a  consulting  firm  that 
is  a  sister  company  to  CIO’s  publisher. 
“But,”  he  says,  “now  [traceability]  is 
mainly  a  manual  procedure.  Compa¬ 
nies  don’t  have  it  automated.” 

And  that’s  a  problem.  ConAgra,  for 
example,  had  to  revise  its  recall  twice 
as  it  learned  more  about  how  much 
infected  product  it  could  have  manu¬ 
factured  and  where  it  might  have  gone, 
according  to  FDA  records.  The  origi- 


When 

Disasters 

Strike 

Supply  chains  are  your 
first  line  of  defense.  They 
can  also  be  your  Waterloo. 

RECALLS  AREN’T  THE  ONLY 

events  that  put  supply  chains  to 
the  test.  Disruptions  of  all  sorts  can 
provide  insight  into  how  robust  and 
efficient  your  supply  chain  is. 

Loose  supply  chains  can  hamper 
companies  in  interpreting  informa¬ 
tion,  says  David  Simchi-Levi,  a  pro¬ 
fessor  in  the  civil  and  environmental 
engineering  department  at  MIT.  For 
example,  lightning  struck  Philips 
Semiconductor’s  factory  in  New 
Mexico  in  2000,  sparking  a  fire  that 
shut  down  production  of  its  radio  fre¬ 
quency  chips,  which  both  Nokia  and 
Ericsson  were  then  using  in  their  cell 
phones.  Within  three  days,  Nokia’s 
supply  chain  systems  detected  a 
slowdown  of  incoming  parts  from 
Philips  and  alerted  plant  managers 
and  then  corporate  managers,  says 
Simchi-Levi,  who  studied  how  the 
companies  managed  this  disruption. 

Within  two  weeks,  Nokia  rede¬ 
signed  its  phone  to  use  other  com¬ 
panies’  chips  and  persuaded  Philips 
to  shift  production  of  its  chip  to  other 
factories. 

Ericsson,  on  the  other  hand, 
didn’t  respond  to  the  problem  until 
four  weeks  after  the  fire— in  part, 
says  Simchi-Levi,  because  its  manu¬ 
facturing  and  supply  chain  systems 
weren’t  programmed  to  spot  risks 
early  enough.  Nokia  locked  up  alter¬ 
nate  suppliers;  Ericsson  lost  market 
share  that  it  never  regained.  By  the 
end  of  the  year,  it  was  out  of  the 
phone  business. 

Supply  chain  problems,  Simchi- 
Levi  concludes,  “change  markets.” 

-K.S.N. 
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nal  Valentine’s  Day  2007  announcement 
recalled  peanut  butter  made  after  May 
2006.  In  early  March,  ConAgra  expanded 
the  scope  to  December  2005  and  added 
toppings  made  in  its  Humboldt,  Tenn., 
plant  using  peanut  butter  from  its  Syl¬ 
vester,  Ga.,  plant,  where  the  original  con¬ 
tamination  had  occurred.  A  week  later, 
ConAgra  pushed  the  date  back  to  October 
2004—22  months  before  the  first  reports 
of  illness  were  registered  with  the  Centers 
for  Disease  Control  in  Atlanta. 

ConAgra  declined  to  comment  on  the 
recall.  Talking  about  how  its  IT  and  sup¬ 
ply  chain  managers  perform  recalls,  a 
spokeswoman  says,  “doesn’t  align  with 
our  priorities.”  But  it’s  clear  the  experi¬ 
ence  revealed  problems  at  ConAgra.  Paul 
Hall,  vice  president  of  global  food  safety, 
gave  a  talk  at  the  Food  Marketing  Institute 
in  April,  after  the  recall  was  under  way. 
The  peanut  butter  recall  taught  ConAgra 
lessons  other  food  manufacturers  can  use, 
he  noted,  including  knowing  where  all  of 
your  product  is  going,  such  as  toppings, 
and  assessing  ahead  of  time  overall  recall 
and  traceability  processes  across  your 
supply  chain. 

Hall  himself  is  at  ConAgra  as  a 
result  of  the  recall.  The  company  cre¬ 
ated  a  global  food  safety  group  in  Feb¬ 
ruary  2007  and  hired  him  to  lead  it. 

Lead  Paint  and  Other 
Horror  Stories 

When  your  boss  sweats  through  hos¬ 
tile  questions  from  Wall  Street  or  is 
sworn  in  to  testify  before  Congress, 
as  were  both  ConAgra  Senior  Vice 
President  of  Operations  David  Colo 
and  Mattel  CEO  Bob  Eckert,  he’s  got 
a  piece  of  paper  in  his  hands  and  a 
trusted  adviser  whispering  in  his  ear. 
He’s  not  working  with  data;  he  needs 
information.  IT  leaders  have  to  provide 
it,  turning  numbers  into  ideas. 

For  example,  in  his  testimony,  Eck¬ 
ert  outlined  the  history  of  Mattel’s 
early  August  recall  of  those  Chinese- 
made  toys  containing  lead  paint. 

When  product  samples  failed  lead 
tests  performed  for  a  Mattel  trading 
partner  in  France,  Eckert  said,  Mattel 


product  integrity  employees  in  China  then 
inspected  the  manufacturing  records  the 
company  requires  its  Chinese  contractors 
to  keep,  showing  data  such  as  pigment 
tests  that  can  be  matched  to  specific  con¬ 
tainers  of  paint  in  use  on  the  factory  floor. 
The  containers  get  stickers  with  batch 
number,  test  number  and  other  informa¬ 
tion.  That  data  must  be  kept  available  for 
periodic  audits. 

By  assessing  data  the  factory  handed 
over,  as  well  as  data  it  couldn’t— such  as 
authorization  to  use  paint  from  a  source 
not  approved  by  Mattel— Mattel  tracked 
the  lead  to  yellow  pigment  in  paint  used 
on  some  parts  of  certain  Dora  the  Explorer 
and  Sesame  Street  toddler  toys. 

“Based  on  what  I  saw  within  the  first 
week  of  this  hitting  them,  they  had  a 
pretty  solid  contingency  plan  in  place,” 
says  John  Quelch,  a  business  adminis¬ 
tration  professor  at  Harvard  Business 
School.  (Mattel  declined  a  request  for  an 
interview.) 

CIOs  who  want  to  mitigate  risk  during 
a  recall  must  move  information  to  where 


“If  there’s  proiiuct 
that  can  hurt 
someone,  you  stop 
what  you’re  (doing 
and  focus  on  that. 
You  want  to  be 
as  accurate  as 
possible.” 

-FORMER  CONAGRA  VP 
RICK  BLASGEN 


it  needs  to  be:  to  the  FDA  or  U.S.  Depart¬ 
ment  of  Agriculture  or  Consumer  Prod¬ 
uct  Safety  Commission,  for  example.  Or  to 
factory  employees  and  to  the  public,  says 
Rick  Blasgen,  former  senior  vice  president 
of  integrated  logistics  at  ConAgra. 

Blasgen,  who  left  ConAgra  in  2005  to 
become  president  and  CEO  of  the  Coun¬ 
cil  of  Supply  Chain  Management  Profes¬ 
sionals,  declined  to  talk  specifically  about 
ConAgra.  But  during  his  three  years  there 
and  his  five  years  leading  Nabisco’s  sup¬ 
ply  chain  operations  before  that,  he  was 
part  of  several  recalls.  “Particularly  if 
there’s  product  that  can  hurt  someone, 
you  stop  what  you’re  doing  and  focus  on 
that,”  he  says.  “You  want  to  be  as  accurate 
as  possible.” 

Who  Wants  Yesterday’s 
Data?  (You  Do) 

Accuracy,  unfortunately,  is  not  an  absolute. 
Manufacturing  systems  commonly  fail 
to  feed  production-line  information  into 
corporate  data  warehouses,  where  it  could 
be  kept  to  trace  bad  products  or  bad  ingre¬ 
dients  down  the  road,  says  Fernando 
Gonzalez,  CIO  of  Byer  California,  a 
$300  million  clothing  company.  Gon¬ 
zalez  managed  IT  at  aerospace,  medical 
device  and  chemical  companies  before 
coming  to  Byer,  and  has  been  involved 
in  several  recalls,  including  one  of  rail¬ 
road  car  room  deodorizers  contami¬ 
nated  by  bacteria. 

“If  you  can’t  tell  it  was  this  produc¬ 
tion  line  on  this  shift  on  these  days,” 
Gonzalez  says,  “then  you’re  stuck  with 
an  estimate,  doing  an  expansive  recall 
just  to  be  safe.” 

Manufacturing  execution  systems, 
such  as  packages  from  Atos  Origin 
or  Manugistics,  keep  that  kind  of 
data.  SmartOps  offers  a  supply  chain 
dashboard  that  managers  inside  and 
outside  the  factory  can  use  to  watch 
manufacturing  activity  and  be  alerted 
to  problems,  such  as  failures  in  quality 
control.  (For  more  on  vendors  in  this 
space,  see  “Software  for  Hard  Times,” 
Page  46.) 

On  the  deodorizer  recall,  Gonzalez’s 
company  could  trace  the  offending 
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H  ow  to  Turn  the  Tide 

Five  best  practices  to  prepare  for  product  recalls 


MORE  THAN  628  FOODS  and 

hard  goods  have  been  recalled  so 
far  this  year,  announting  to  at  least 
60  million  individual  items  and 
33  million  pounds  of  food.  That's 
a  lot  of  stuff  swimming  upstream 
against  the  supply  chain  tide.  So 
assume  you  will  get  hit  by  a  recall, 
and  get  ready  to  provide  clean, 
complete  data  to  senior  executives 
working  to  mitigate  the  damage. 


Here  are  five  ways  to  prepare 
for  the  inevitable; 

Q  Create  an  R-team.  Desig¬ 
nate  a  recall  task  force  of  managers 
from  sales,  customer  service,  man¬ 
ufacturing  and  IT.  Tap  people  from 
supplier  relations,  say,  or  transpor¬ 
tation,  as  needed.  Everyone  should 
be  trained  in  how  to  query  each 
other’s  core  applications,  and  how 
their  data  meshes  to  tell  the  story 
of  where,  when  and  how  a  product 
went  bad. 

Q  Study  up.  Read  the  inves¬ 
tigative  procedures  of  the  CPSC, 
FDA  and  USDA  to  understand  what 
data  inspectors  will  want.  IT  should 
work  with  plant  managers  to  see 
how  quickly  and  completely  they 
can  supply  the  data. 

Q  Practice.  Do  a  mock  recall. 
Along  with  disasters  and  terrorist 
attacks,  recalls  are  one  of  the  risks 


the  IT  group  at  Procter  &  Gamble 
practices  handling,  says  Steve 
David,  former  P&G  CIO.  Choose  a 
batch  number  for  a  real  group  of 
products,  he  advises.  Then,  using 
supplier,  manufacturing,  distribu¬ 
tion  and  transportation  systems, 
run  reports  to  try  to  account  for 
what  was  made,  shipped  and 
received.  How  accurate  were  those 
practice  reports?  Where  and  when 
did  manual  work,  such  as  question¬ 
ing  the  plant  manager  in  person 
or  calling  the  trucking  company, 
become  necessary?  How  long  did 
it  all  take? 

Q  Copy  the  masters.  Phar¬ 
maceutical  and  aerospace  compa¬ 
nies  can  trace  the  pedigree  of  their 
finished  products  back  to  the  com¬ 
ponent  level.  They  even  know  what 
the  temperature  in  the  factory  was 
when  the  widget  or  pill  was  made. 
They  can  do  this  because  federal 
regulations  require  that  level  of 
detail  for  public  safety.  Evaluate 
whether  practices  and  procedures 
they  follow  could  work  for  you. 

Q  Reach  out.  Use  the  Web 

to  communicate  with  consumers, 
taking  some  of  that  burden  off 
the  retailers.  Mattel,  for  example, 
regularly  freshens  its  site  with 
information  about  ongoing  recalls, 
plus  images  and  video  to  answer 
consumer  questions.  This  helps 
divert  at  least  some  consumers 
from  bringing  questions  and  old 
products  to  Mattel  retailers.  “The 
last  thing  Mattel  wants  is  to  have 
millions  of  products  handed  to 
retailers,  causing  a  huge  logistics 
problem,”  says  Harvard  Business 
School  professor  John  Quelch.  "It’s 
vital  for  any  manufacturer  to  mini¬ 
mize  negative  impact  and  inconve¬ 
nience  to  retailers.”  -K.S.N. 


ingredient  back  to  a  supplier  in  the  U.K. 
But  that  supplier  didn’t  know  if  the  raw 
materials  had  come  in  contact  with  other 
ingredients.  “All  we  could  do  was  assume 
that  everything  from  the  U.K.  supplier  was 
contaminated,”  he  says,  adding  that  the 
recall  cost  “several  million  dollars.” 

Sometimes  data  isn’t  stored  long 
enough.  Barkai,  at  Manufacturing 
Insights,  remembers  wanting  to  study 
one  year  of  supply  chain  activities  at  a 
U.S.  auto  maker.  “I  was  told  I  would  not 
be  able  to  receive  [the  data]  because  they 
had  limited  server  space,  so  they  purged 
it,”  he  says.  “Someone  decided  six  months 
was  good  enough.” 

When  deciding  how  long  to  hold  data, 
factor  in  the  product’s  life  span,  as  well 
as  any  local  health  department  require¬ 
ments,  federal  legislation  and  the  poten¬ 
tial  for  litigation  if  something  goes  wrong, 
recommends  a  data  security  manager  at 
ConAgra,  who  asked  not  to  be  named.  He 
says  data  collection  during  a  recall  is  “an 
arduous  task”  at  the  company,  but  “not 
a  scramble.”  (See  recall  best  practices, 
“How  to  Turn  the  Tide,”  at  left.) 

How  to  Manage  a  Recall 

As  Blasgen  explains,  the  central  goal  in  a 
recall  is  to  figure  out  how  much  of  the  bad 
product  was  manufactured  and  where  it 
went. 

To  do  that,  he  recommends  starting  by 
querying  your  manufacturing  execution 
system,  which  keeps  data  on  production 
lines,  product  batches,  ingredients  and 
conditions  inside  the  factory  when  prod¬ 
ucts  were  made.  ConAgra,  according  to  its 
website  and  other  corporate  communica¬ 
tions,  uses  a  mix  of  Manugistics  and  SAP 
software  in  its  factories  to  schedule  and 
monitor  manufacturing  runs. 

Next,  Blasgen  says,  IT  managers 
should  pull  shipping  records  from  their 
transportation  management  systems. 
(Kewill  Ship  and  Highjump  Software 
are  typical  systems.)  Search  for  date, 
lot  or  batch  codes  to  figure  out  which 
distribution  centers  or  customers  were 
sent  the  suspected  bad  product,  Blas¬ 
gen  says.  Then  match  that  information 
against  data  in  the  distribution  centers’ 
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and  customers’  receiving  systems. 

Those  are  the  steps  Blasgen  recom¬ 
mends.  But  most  supply  chains  are 
not  configured  to  allow  a  CIO  to  follow 


went  to  overhauling  the  Sylvester  fac¬ 
tory.  ConAgra  bought  a  new  peanut 
roaster,  upgraded  finished-product 
testing  procedures,  built  new  factory 


ConAgra  CFO  Andre  Hawaux  predicted 
in  June  that  peanut  butter  ‘‘will  be  a  lower 
profit  contributor”  next  year. 


them.“Do  you  see  what’s  happening?” 
Blasgen  asks.  “Multiple  systems  with 
their  own  ways  of  querying  and  no 
magic  ‘recall  button’  to  press  for  any 
of  this.” 

Fixing  a  Hole  Where 
the  Rain  Leaked  In 

ConAgra  had  streamlined  its  supply 
chain  with  its  $300  million  “Project 
Nucleus”  started  in  2003  and  mostly 
led  by  Blasgen.  The  company  closed 
factories,  consolidated  distribution 
centers  and  standardized  on  SAP 
enterprise  resource  planning  software. 
Blasgen  says  that  any  company  that 
reworks  its  supply  chain  to  be  more 
efficient  will  make  and  move  products 
faster.  That’s  good  when  the  products 
are  good  and  bad  when  they’re  not. 

In  recent  financial  statements  filed 
with  the  Securities  and  Exchange 
Commission,  ConAgra  claims  savings 
of  $275  million  so  far  from  its  supply 
chain  revamp.  That  has  helped  offset 
the  $78  million  ConAgra  reportedly 
has  spent  to  date  on  the  recall— costs 
that  include  customer  notifications, 
installing  and  staffing  a  toll-free  hot¬ 
line,  consumer  refunds,  and  collecting 
and  disposing  of  bad  peanut  butter. 

Another  $15  million  to  $20  million 
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walls  and  designed  other  ways  to  keep 
peanut  dust  and  raw  peanuts  away 
from  already  roasted  peanuts  (heat¬ 
ing  to  165  degrees  kills  salmonella).  It 
also  put  up  a  new  roof  and  installed  a 
new  sprinkler  system.  Why? 

Because  the  company  has  a  theory 
as  to  how  salmonella  got  into  Peter 
Pan  in  the  first  place.  For  an  undeter¬ 
mined  time,  broken  sprinkler  heads 
dripped  inside  the  Sylvester  plant 
while  rainwater  seeped  through  the 
factory’s  roof. 

The  moisture  from  those  sources 
may  have  awakened  dormant  salmo¬ 
nella  bacteria  in  peanut  dust  or  in 
stocks  of  raw  peanuts.  That’s  what 
ConAgra’s  Colo  told  Congress  in 
April.  ConAgra’s  finished-product 
tests  missed  the  contamination,  Colo 
testified.  The  company  then  trucked 
jars  to  distribution  centers  and  from 
there  to  Wal-Mart,  Dollar  General, 
Kroger  and  other  supermarkets,  ware¬ 
house  clubs,  food  distributors  and  res¬ 
taurants  across  the  U.S. 

At  last  count,  the  Centers  for  Dis¬ 
ease  Control  and  Prevention  reports 
that  628  people  in  47  states  got  sick. 

“When  we  asked  people  who  were 
sick,  ‘Can  you  take  out  your  jar  and 
tell  us  the  brand  and  lot  code?’  says 
Anandi  Sheth,  a  CDC  doctor  who 
investigated  the  outbreak,  “we  repeat¬ 
edly  saw  Peter  Pan  and  Great  Value 
and  lot  code  2111.” 

That’s  the  data  string  ConAgra  uses 
to  identify  products  made  in  Sylvester. 
For  example,  one  bad  batch  was  coded 
“21115055  00  1037 A.”  After  the  2111, 


Software  for 

Hard  Times 

When  good  products  go 
wrong,  these  apps  can  help 

WHILE  THERE’S  NO  SUCH  THING 

as  recall  software,  CIOs  can  use  sup¬ 
ply  chain  intelligence— reporting  and 
analysis  capabilities  included  in  or 
added  onto  SAP,  Oracle,  i2  and  other 
applications— to  extract  key  factory 
and  distribution  data  about  products 
gone  wrong. 

The  big  vendors  don’t  showcase 
these  features  because  recalls  are  a 
touchy  subject,  says  Fernando  Gon¬ 
zalez,  CIO  of  Byer  California,  a  $300 
million  clothing  maker.  They're  “one 
of  those  things  you  never  want  to  talk 
about  so  vendors  are  not  doing  any 
marketing  about  it,”  he  says. 

But  i2,  for  example,  offers  i2 
Intelligence,  a  dashboard  to  track 
manufacturing  and  quality  control 
parameters,  such  as  the  rate  at 
which  products  sampled  from  the 
line  fail  quality  tests.  Plant  manag¬ 
ers,  alerted  when  product  faults 
reach  preset  thresholds,  can  make 
changes  that  could  prevent  the  bad 
stuff  from  reaching  consumers.  i2 
Intelligence  works  with  i2’s  own 
systems  as  well  as  with  those  from 
Microsoft,  Oracle  and  SAP. 

SmartOps  provides  analytic 
tools  designed  specifically  for  SAP 
applications.  Its  namesake  package 
can  be  configured  to  extract  data  on 
quality  testing  and  product  returns 
from  SAP’s  R/3  systems  and  analyze 
it  for  trends.  Technology  and  sup¬ 
ply  chain  managers  can  also  create 
reports  for  compliance  audits.  Red 
Prairie  offers  a  data  warehouse  to 
track  product  genealogy  so  that 
should  a  quality  issue  arise,  the 
company  can  trace,  by  lot  code,  what 
ingredients  went  into  which  finished 
goods  and  where  those  ingredients 
came  from.  -K.S.N. 
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The  Risk  of  Lost  Opportunity 


It's  every  bit  as  important  as  the  other  risks  that  threaten  a 
company's  success  — security,  compliance,  credit,  technology, 
operational,  financial,  geopolitical,  market. 


BearingPoint  understands  this.  And  knows  how  to  help  companies 
seize  opportunity  rather  than  run  from  the  risks  surrounding  it. 
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Supply  Chain  Management 


Recalling  Through  the  Years  The  big,  the  bad,  the  ugly 


1992 

Braun  warns  con¬ 
sumers  that  filters 
on  two  models  of  its 
espresso/cappuc- 
cino  makers  can 
cause  glass  carafes  to 
break.  People  don't 
like  glass  in  their  java. 


1996 

Braun  recalls  5,000 

espresso/cappuc¬ 
cino  makers  (same 
problem,  different 
models). 

1999 

Burger  King  recalls 
25  million  Pokemon 
balls  in  kids’  meals. 
The  tykes  could  suffo¬ 
cate  if  they  swallowed 
them. 


2000 

Due  to  tread  problems, 
Bridgestone/Firestone 
recalls  6.5  million  tires 
used  on  Ford  Explorer 
sport-utility  vehicles 
and  pickup  trucks  after 
the  National  Highway 
Traffic  Safety  Admin¬ 
istration  investigates 
complaints  of  injury 
and  death. 

2001 

Evenflo  recalls  3.4  mil¬ 
lion  baby  car  seats. 

The  handles  can 
release  unexpectedly, 
causing  the  seat  (and 
baby)  to  flip. 

2002 
Kellogg  recalls 
730,000  packages  of 
Pop-Tarts  because 
they  contain  unde¬ 


clared  egg,  which  is  an 
allergen  that  must  be 
indicated  on  the  label. 

Abbott  Laboratories 
recalls  750,000  gon¬ 
orrhea  tests  because 
they  may  give  false 
negative  results,  advis¬ 
ing  people  who  have 
been  tested  for  the  dis¬ 
ease  in  the  prior  eight 
months  to  be  retested. 


2003 

Disney  recalls  40,000 
“Woody”  dolls  with 
buttons  that  pose  a 
choking  hazard. 

2004 

Merck  withdraws 
Vioxx,  an  arthritis 
pain  medication  found 
to  increase  risk  of  heart 
attack  and  stroke. 


2005 

Disney  recalls  12,900 
pairs  of  children’s 
sunglasses.  They 
contain  high  levels  of 
lead  paint. 


2006 

205  confirmed  ill¬ 
nesses  and  three 
deaths  from  e.coli  are 
traced  to  spinach 
from  Natural  Selection 
Foods,  according  to  the 
FDA. 

The  Nunes  Co. 
recalls  lettuce  con¬ 
taminated  with  e.coli 
that  the  Centers  for 
Disease  Control  and 
Prevention  links  to 
illnesses  among  East 
Coast  Taco  Bell  cus¬ 
tomers. 


Dell  recalls 4  million 
laptops,  and  Apple 
1.1  million,  that  are 
running  on  fire-prone 
Sony  batteries. 

2007 

Nokia  recalls  46  million 
cell  phone  batter¬ 
ies  for  manufacturing 
defects  that  could 
cause  them  to  short- 
circuit,  overheat  and 
dislodge. 

United  Food  Group 
recalls  5.7  million 
pounds  of  ground 
beef  that  could  be 
e.coli  contaminated. 


Mattel  recalls  21  mil¬ 
lion  Chinese-made 
toys  due  to  lead-paint 
and  choking  hazards. 

-K.S.N. 


the  5  indicated  2005,  the  year  made;  055 
was  Julian  date,  for  the  55th  day  of  the  year; 
1037  was  military  time;  and  A  showed 
which  production  line  within  the  factory. 

How  Recalls  (and  Peanut 
Butter)  Stick 

While  Peter  Pan  returned  to  stores  in 
time  for  back-to-school  shopping  in  late 
August,  and  a  new  “Miss  Georgia  Peanut 
Festival”  was  crowned  on  schedule  last 
month  at  the  annual  event  ConAgra  spon¬ 
sors,  the  company  predicts  sales  won’t 
soon  return  to  pre-salmonella  heights. 


ConAgra  CFO  Andre  Hawaux  told 
financial  analysts  in  June  that  peanut 
butter  “will  be  a  lower  profit  contribu¬ 
tor”  next  year,  even  compared  with  this 
troubled  year’s  figure.  That’s  “due  to 
relaunch  investments  and  lower  [sales] 
volume  planned,”  he  said. 

Lawsuits  abound.  Parents  are  suing 
on  behalf  of  their  children;  a  prisoner  in 
upstate  New  York  serving  12  years  for 
manslaughter  got  sick  and  he’s  suing.  In 
another  suit,  a  man  says  his  wife,  after  eat¬ 
ing  Peter  Pan,  had  to  have  her  gallbladder 
removed,  which  meant  he  subsequently 


“suffered  the  loss  of  spousal  and  other  ser¬ 
vices  commonly  provided  by  his  wife.” 

Sixty-seven  cases,  including  that  of 
Hein,  the  Iowa  mom,  were  consolidated  in 
July  in  US.  District  Court  in  Atlanta,  accus¬ 
ing  the  company  of,  among  other  charges, 
negligence  and  liability  for  product  defects. 
ConAgra  has  denied  all  charges. 

Hein  and  her  children  have  recovered 
but  they  no  longer  eat  Peter  Pan.  BEI 


Senior  Editor  Kim  S.  Nash  can  be  reached  at 
knash@cio.com.  To  comment  on  this  story,  go 
to  www.cio.com/article/148054. 
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Your  CEO  will  want  Telepresence. 
Get  in  front  of  it...  Now! 


The  worldwide  leader  in  video  and  voice  is  the  real 
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•  100%  standards-based  to  fit  into  your  environnnent 

•  Simple  to  manage  and  maintain 

•  Low  footprint,  lowest  bandwidth  consumption 

•  Flexible  room  configuration  from  4  seats  to 
28  seats  to  suit  your  application 

•  Patented  EyeConnect™  technology  and  true  stereo  HD  audio 
for  a  more  natural,  fully  immersive  meeting  experience 

•  RealPresence^^  Experience  with  up  to  48:9  aspect 

ratio  screen  with  Cinematic  View 
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TOGETHER,  GREAT  THINGS  HAPPEN. 
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Innovation  Strategy 


it’s  ilmoVati 
that  creates 
wealth.” 


No  Innovation  forlbu! 


Business  strategy  guru 
Gary  Hamel  blames  obsolete 
management  practices  for 
yourfailuretoestablisha 
culture  of  innovation. 

One  solution:  Stop  focusing 
on  efficiency. 

BY  ELANA  VARON 


Forget  what  you  know  about  management, 

says  business  strategy  guru  Gary  Hamel.  It  won’t  help  you  meet  the 
challenges  that  face  your  company  today. 

“We’re  now  living  in  a  world  where  it’s  innovation  that  creates 
wealth,”  says  Hamel,  founder  of  the  consultancy  Strategos  and  a  visit¬ 
ing  professor  at  the  London  Business  School.  For  more  than  20  years, 
Hamel  has  studied  what  companies  need 
to  do  to  compete.  He  pioneered,  with  C.K. 

Prahalad,  the  concept  of  core  competen¬ 
cies— the  unique  expertise  a  company 
possesses  that  provides  competitive 
advantage.  In  2000,  Hamel’s  book  Lead¬ 
ing  the  Revolution  exhorted  readers  to 
embrace  change  as  the  dotcommers  had 
and  reinvent  their  business  models. 


Reader  ROI 

::  The  role  CIOs  should 
play  in  innovation 

::  Skills  essential  to 
becoming  more 
innovative 

::  Organizational 
barriers  to  innovation 
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ws®  XP  Professional 


Secure  your  small  business  with  a  little  help  from  Toshiba. 

Getting  your  laptop  stolen  is  not  something  you  walk  around  thinking 
about,  until  it  happens  to  you.  That's  why  the  Satellite  Pro®  A200  is 
available  with  an  optional  Computrace®  LoJack  for  Laptops®  security 
system.'  So  now  you  can  keep  those  impressive  trade  secrets,  well,  secret. 
And  let's  not  forget  about  its  zippy  Intel®  Centrino®  Duo  processor  and 
genuine  Windows®  XP  Professional  operating  system.  See  what  else  we 
can  do  for  your  small  business  at  www.toshiba.com/secure. 


TOSHIBA 
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een  stolen 


just  what  you'd  expect 
from  the  laptop  experts. 


Leading  Innovation  >» 


Dmputrace  LoJack  for  Laptops  service  is  available  for  optional  purchase  for  $49.99  at  www.toshibddirect.com  or  your  local  reseller.  Transmission  speeds  may  vary.  See  Wireless  Legal  Footnote  at  www.info.ioshjba  com  Satellite  Pro  Is 
alsiered  trademark  of  Toshiba  America  Information  Systems,  Inc.,  and/or  Toshiba  Corporation.  Intel,  the  Intel  logo,  Centrino.  Intel  Core,  and  Core  Inside  are  trademarks  of  Intel  Corporation  in  the  U.S.  and  other  countries.  Wirwjows  and 
lows  Vista  are  registered  trademarks  of  Microsoft  Corporation  in  the  U.S  and  other  countries.  Computrace  is  a  registered  trademark  of  Absolute  Software  Corporation.  LoJack  is  a  registered  trademark  of  LoJack  Corporation.  All  other 
mtarks  are  the  property  of  their  respective  owners.  While  Toshiba  has  made  every  effort  at  the  lime  of  publication  to  ensure  the  accuracy  of  the  information  provided  herein,  product  specifications,  configurations,  prices,  system/ 
ponent/options  availability  are  all  subject  to  change  without  notice.  For  the  most  up-to-date  product  information  about  your  computer,  or  to  stay  current  with  the  various  computer  software  or  hardware  options,  visit  Toshiba's  Web  site  at 
/.pcsupport  toshiba.com.  02007  Toshiba  America  Information  Systems.  Inc.  All  rights  reserved. 
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Innovation  Strategy 


*lfyou’reaCIO,youneedtos[)endalotoftimeout 
ontiiefriiigesofiheWebbecaiisethat’s^^^ere 
theiimovationis  takingplace.  Youneed  to  spend 
alotoftimewithpeopleiinder25yearsold.’’ 

-GARY  HAMEL 


In  his  new  book.  The  Future  of  Manage¬ 
ment,  Hamel  argues  that  the  principles 
and  practices  used  to  run  most  companies 
were  invented  to  solve  a  problem— how 
to  be  more  efficient— that  today’s  busi¬ 
nesses  have  largely  mastered.  “The  most 
critical  prerequisite  to  driving  higher  lev¬ 
els  of  efficiency  is  conformity— to  policy 
and  standards  and  guidelines  and  qual¬ 
ity  protocols— and  yet,  obviously,  the 
most  fundamental  kind  of  prerequisite 
for  innovation  is  diversity  in  thought 
and  action.” 

Hamel  suggests  revamping  every  man¬ 
agement  concept— from  how  employees 
use  their  time  to  how  funding  is  allocated 
to  projects— so  that  managers  can  inspire 
workers,  identify  the  most  promising 
business  ideas  and  marshal  the  resources 
to  execute  them.  IT  organizations  will  play 
a  critical  role  in  two  ways:  first,  by  build¬ 
ing  systems  that  companies  will  use  inter¬ 
nally  to  facilitate  innovation,  and  second, 
by  identifying  how  companies  can  use 
new  technologies  to  upend  established 
business  models  and  deliver  new  prod¬ 
ucts  and  services.  He  spoke  recently  with 
CIO  Executive  Editor  Elana  Varon  about 
what  IT  leaders  need  to  do  differently. 

CIO:  People  have  always  complained 
that  management  squelches  innovation. 
What  made  you  decide  they’re  right? 
Gary  Hamel:  Partly,  it’s  having  worked 
for  the  last  20  years  to  help  companies 
of  all  sorts  innovate.  The  work  that  my 
company,  Strategos,  has  done  through 
the  years  with  companies  like  Shell  and 
Nokia  and  others  created  billions  of  dol¬ 
lars  in  market  value.  But  as  soon  as  you 
turned  your  back,  organizations  reverted 
to  type. 

It  seemed  to  me  it  was  time  to  go  back 


to  the  genetic  foundations  of  management 
and  of  large  organizations  and  under¬ 
stand  how  we  make  companies  system¬ 
atically  more  innovative  than  they  have 
been  over  the  last  hundred  years. 

Do  you  think  there’s  a  difference 
between  old  companies  and  new 
companies?  The  examples  in  your 
book,  such  as  Whole  Foods  Market 
and  Google,  employed  unconventional 
management  models  from  the  start. 

It’s  certainly  easier  to  build  a  more  inno¬ 
vation-friendly  management  model  if 
you’re  starting  with  a  clean  sheet  of  paper. 
Having  said  that,  most  of  the  people  who 
start  new  companies  come  out  of  large 
companies.  So  you  find  that  industrial- 
age  management  DNA  in  a  lot  of  young 
companies.  One  exercise  I  sometimes  do 
with  folks  is  to  suppose  they  want  to  start 
an  entirely  new  company.  How  radically 
would  they  change  the  way  that  company 
is  organized  or  managed?  Most  people 
can’t  think  of  a  very  radical  alternative. 

What  do  you  mean  when  you  say  that 
the  Internet  is  the  best  metaphor  for 
21st-century  management? 

Management  is  about  doing  two  things. 
One,  it’s  about  amplifying  human  capabil¬ 
ities  to  create  the  conditions  that  inspire 
people  and  to  encourage  people  to  give  the 
best  of  themselves.  The  second  dimension 
is  aggregating  human  capability  so  people 
can  do  collectively  what  they  couldn’t  do 
individually.  Like  building  a  Boeing  787, 
for  example. 

The  Internet  is  doing  exactly  what 
management  is  supposed  to  do.  It’s  ampli¬ 
fying  and  aggregating  human  capabilities. 
It’s  democratizing  the  tools  of  creativ¬ 
ity,  from  digital  cameras  to  blogs  to  the 


ability  to  do  mash-ups.  The  Net  is  also 
surprisingly  good  at  aggregating  human 
capability.  Linux  is  the  fastest-evolving 
piece  of  software  that  human  beings  have 
ever  created. 

The  three  big  challenges  for  companies 
over  the  next  generation  are  going  to  be: 
Adaptability— how  you  build  things  that 
can  transform  themselves.  Innovation- 
how  you  mobilize  the  imagination  of 
every  single  person  in  your  organization. 
Engagement— how  you  create  organiza¬ 
tions  that  are  so  engaging  emotionally 
and  intellectually  that  people  want  to 
bring  their  capabilities  to  work.  What’s 
the  most  adaptable,  innovative  and  engag¬ 
ing  thing  on  the  planet?  The  Internet. 

IT  leaders  aspire  to  be  enablers  of 
business  innovation.  How  do  IT  depart¬ 
ments  have  to  change  to  do  that? 

Think  about  the  insights  that  people  need 
to  be  innovative,  the  insights  they  need 
into  customers,  into  technology,  into  com¬ 
petitors.  In  most  companies,  those  insights 
are  held  very  narrowly  in  functional  spe¬ 
cialties  across  the  company.  Number  two, 
you  have  to  be  able  to  experiment  and  try 
new  things.  The  third  thing  you  need  to 
innovate  is  resources,  and  most  compa¬ 
nies  today  are  run  so  tightly  that  it  would 
seem  that  every  dollar  of  capital  and  every 
hour  of  human  effort  is  already  dedicated 
to  some  mission-critical  project. 

We’ve  done  work  at  Whirlpool  to  help 
them  create  an  IT-enabled  innovation  sys¬ 
tem  where  every  employee  has  access  to 
those  insights,  where  it’s  easy  for  employ¬ 
ees  to  propose  their  ideas,  where  there’s 
a  process  for  peer  review  for  new  ideas 
so  you  can  bring  the  wisdom  of  the  entire 
organization  to  bear. 

It’s  not  anything  here  that’s  rocket 
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WHEN  INFORMATION  AVAILABILITY  MATTERS 


SunGard.  Setting  new  standards  for 
Information  Availability  by  delivering 
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science.  It  just  requires  a  new  set  of  pri¬ 
orities  for  IT  people.  One  of  the  questions 
you  have  to  ask  is,  to  what  extent  do  our 
IT  systems  make  us  more  adaptable  as  a 
company,  or  less?  When  I’m  innovating 
in  companies  and  we  want  to  try  some¬ 
thing  new,  the  single  biggest  brake  on  that 
is  almost  always  the  IT  function.  First  of 
all,  they’re  going  to  tell  you  they’re  so 
overwhelmed  that  they  can’t  get  to  the 
request  for  the  next  six  months.  Number 
two,  they’re  so  driven  by  issues  of  security 
and  control  that  if  you  want  to  touch  the 
IT  system,  it  almost  takes  an  act  of  God. 
When  we’re  helping  companies  inno¬ 
vate,  whatever  we  do  with  IT  we  almost 
always  do  around  the  existing  systems, 
but  it  just  takes  too  long  and  it’s  too  top- 
down  and  it’s  too  centered  on  control  to 
be  very  helpful. 

You  say  operational  innovation  seldom 
delivers  decisive  long-term  advantage, 
but  that’s  where  CIOs  typically  focus. 

One  of  the  things  I  talk  about  in  the  book 
is  a  hierarchy  of  innovation.  At  the  bot¬ 
tom  is  operational  innovation,  the  kinds 
of  things  that  companies  do  to  run  leaner 
or  be  quicker  or  deliver  24/7  customer 
service.  A  step  up  from  that  is  product 
innovation  that  delivers  the  next  wonder¬ 
ful  flat-screen  television.  A  level  up  from 
that  you  have  business  model  innovation. 
Dell,  at  one  time,  was  a  business  model 
innovator.  And  a  level  up  from  that  you 
have  what  I’d  call  architectural  innova¬ 
tion.  This  is  when  you  get  a  whole  indus¬ 
try  thinking  differently— what  Apple  did 
with  iTunes  to  get  all  these  music  compa¬ 


nies  to  agree  to  a  new  digital  rights  man¬ 
agement  system. 

At  the  top  you  have  management  inno¬ 
vation.  All  of  my  research  suggests  that  it’s 
management  innovation  that  has  created 
the  most  enduring  source  of  competitive 
advantage.  But  the  distribution  of  IT  effort 
is  in  inverse  proportion  to  the  potential  to 
create  value.  Most  of  it’s  at  the  bottom  and 
almost  nothing  at  the  top. 

If  I  were  a  CEO,  the  first  question  I’d 
ask  in  every  budget  meeting  and  in  every 
review  meeting  with  my  CIO  would  be 
what  percentage  of  our  total  budget  and 
time  is  going  into  projects  that  will  allow  us 
to  do  something  unique  in  our  industry. 

So  many  companies  are  now  running 
the  same  software  platforms,  whether 
Oracle  or  SAP  or  whatever.  Increasingly, 
we  rely  on  the  same  handful  of  offshor¬ 
ing  companies  or  IT  service  companies. 
There  are  a  whole  lot  of  things  that  IT 
folks  have  to  do  to  keep  up  as  part  of  the 
IT  arms  race,  but  in  the  end,  the  only  thing 
that’s  really  going  to  make  a  difference  is 
whether  you’re  using  IT  in  a  unique  way 
to  do  unique  things  where  you  don’t  find 
any  other  benchmarks.  If  you  ask  the 
average  CIO  what  percentage  of  his  total 
budget  and  headcount  is  devoted  to  things 
that  are  unique  to  his  industry,  I  think  it’s 
probably  too  small  a  number. 

What  should  the  number  be? 

Given  the  size  of  IT  budgets,  I  think  it 
should  be  somewhere  between  30  and 
SO  percent,  and  anyplace  where  we  don’t 
think  we  can  create  competitive  advan¬ 
tage,  let  somebody  else  do  it. 


Gary  Hamel;  "In  the 

end,  the  only  thing 
that’s  really  going  to 
make  a  difference  is 
whether  you’re  using 
IT  in  a  unique  way  to 
do  unique  things.” 


IT  leaders  learn  that  the  key  to  success 
is  to  collaborate  with  business  managers 
who  will  champion  their  projects.  But 
you  say  that  “peopie  with  the  boidest, 
most  usefui  ideas  are  probably  not  the 
folks  managing  those  processes  right 
now.”  That  sounds  iike  a  big  disconnect. 
It  is  a  disconnect.  If  I’m  an  IT  person 
and  I  want  to  raise  my  value-added  in 
the  organization,  one  way  is  by  being 
responsive  to  and  solving  the  problems 
of  the  VP  core.  But  if  that’s  my  view  of 
how  I’m  adding  value,  then  my  capacity 
to  add  value  is  limited  by  the  imagination 
of  those  folks. 

As  a  CIO,  you  need  to  be  bringing  ideas 


Leader  in  Middleware 


to  the  party.  You  have  to  be  more  than 
merely  responsive.  You  have  to  be  in  there 
with  your  ideas,  with  your  point  of  view, 
and  bring  opportunity  to  the  table  that 
those  business  leaders  would  have  never 
thought  of.  If  you’re  a  CIO,  you  need  to 
spend  a  lot  of  time  out  on  the  fringes  of  the 
Web  because  that’s  where  the  innovation’s 
taking  place.  You  need  to  spend  a  lot  of 
time  with  people  under  25  years  old. 

What  skills  do  technology  managers 
need  to  be  innovative? 

I  don’t  think  you  can  improve  innovation 
performance  unless  you  understand 
where  innovation  comes  from. 


Number  one,  innovation  comes  from 
challenging  industry  dogma.  You  can 
teach  yourself  and  you  can  teach  others 
how  to  be  contrarian.  Ten  years  ago  in  the 
airline  industry,  every  CEO  would  have 
said  that  the  only  way  to  compete  was  by 
running  a  hub-and-spokes  route  system, 
until  Southwest  and  JetBlue  changed 
those  rules. 


Managing  for  Innovation 


Interested  in  tactics  you  can  use  to  generate 
NEW  IDEAS  in  your  organization?  Check  out 

FIVE  STEPS  TO  MANAGING  INNOVATION  at 
www.cio.com/  article/125700. 
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Number  two  is  understanding  the  early 
warning  signs  of  big  shifts  in  demograph¬ 
ics,  technology,  regulation  or  whatever  it 
may  be  that  most  of  the  industry  simply 
isn’t  paying  attention  to.  I  talk  about 
Whole  Foods  in  the  book.  If  you  look  at 
the  trends  on  which  they  built  their  busi¬ 
ness  model— people  becoming  more  con¬ 
cerned  about  what  they  were  eating,  about 
the  integrity  of  the  food  chain,  about  the 
impact  of  herbicides  and  pesticides  on 
the  environment— these  are  things  you 
could  see  emerging  for  the  last  25  years. 
But  traditional  supermarkets  weren’t  pay¬ 
ing  attention. 

The  third  kind  of  personal  competence 
you  need  to  innovate  is  a  deep  empathy 
with  the  hidden  or  unarticulated  needs 
of  your  customers.  If  you  understand  the 
frustrations  you’re  causing  them,  you 
start  to  understand  there’s  something  you 
could  do  differently. 

I  think  the  last  competence  as  an  inno¬ 
vator  you  need  today  is  you  can’t  think 
about  your  company  in  terms  of  what  it 
makes  and  what  it  does.  You  have  to  think 
of  it  in  terms  of  what  it  owns  and  what  it 
knows— its  strategic  assets.  Then  you  can 
say,  OK,  what  else  could  we  do  with  these? 
Companies  stop  innovating  when  they 
end  up  hostage  to  a  very  narrow  defini¬ 
tion  of  who  they  are. 

CIOs  need  to  be  the  most  creative  peo¬ 
ple  in  their  organizations  and  therefore, 
they  need  to  have  those  skills.  BI3 


Executive  Editor  Elana  Varon  can  be  reached 
at  evaron@cio.com.  To  comment  on  this  story, 
go  to  www.cio.com/article/145951. 
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Data  Centers 


Two  things  computers  do  real  well:  crunch  numbers  and 
turn  electricity  into  heat.  Today,  business  is  asking  IT  to  crunch 
more  numbers  than  ever  before.  That's  a  lot  more  heat. 
Here  are  six  ways  to  put  out  the  f  i res  before  they  start. 


HOT  Co 


UNTIL  RECENTLY.  many  organizations  didn’t 

have  to  think  about  their  data  center  infrastructure  more 
than,  oh,  once  a  decade.  As  long  as  there  was  enough  space 
to  house  that  new  server  rack,  people  figured  cooling  and 
power  needs  would  somehow  work  them¬ 
selves  out.  But  those  times  are  quickly  pass-  Reader  ROI 
ing  as  the  demand  for  computing  power 
increases  and  puts  a  strain  on  electricity 
supplies. 

According  to  market  research  firm  IDC 
(a  sister  company  to  CIO's  publisher), 
computer  support  infrastructure  needed  to 


How  to  decide  if  retrofitting 
your  data  center  is  worth  it 

Why  putting  equipment 
outside  is  better  than  inside 

What  the  nation’s  infrastruc¬ 
ture  crisis  means  to  you 


house  and  run  servers  is  second  only  to  system  price  among 
the  concerns  of  those  who  manage  data  centers.  Steve  Con¬ 
way,  a  research  vice  president  for  high-performance  com¬ 
puting  at  IDC,  says,  “These  issues  were  at  the  number-12 
position  just  three  to  four  years  ago,  which 
means  they  were  a  nonissue.” 

Not  any  longer.  This  change  in  priority 
reflects  both  shifts  in  technology  and  a  sharp 
growth  in  demand  for  processing  power. 
Virtualization  and  multicore  processors  are 
allowing  IT  to  put  dramatically  more  power 
in  a  smaller  footprint.  And  the  degree  to 
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When  Perficient  grew  by  300%  in  just  3 
years,  they  turned  to  the  leader  in  resource, 
project,  and  portfolio  management. 

To  convert  growth  into  profit,  Perficient  needed  an 
end-to-end  solution  that  would  accommodate  an 
aggressive  growth  strategy  while  enhancing  project 
delivery,  client  satisfaction  and  profitability.  Using 
Primavera,  Perficient  has  optimized  project  ROI  and 
resource  utilization,  streamlined  reporting  and 
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Data  Centers 


which  businesses  of  all  types  increasingly 
rely  upon  connected  computing  for  core 
business  processes  has  driven  enterprises 
to  try  to  shove  ever  more  racks  of  comput¬ 
ers  into  their  existing  data  centers.  Mean¬ 
while,  consultancy  Gartner  predicts  that 
by  next  year,  half  the  world’s  data  centers 


will  not  have  the  infrastructure  needed  to 
meet  the  power  and  cooling  requirements 
of  the  latest  high-density  equipment. 

These  changes  bring  to  managers  of 
mainstream  data  centers  issues  that  peo¬ 
ple  like  me  in  high-end  scientific  and  tech¬ 
nical  supercomputing  centers  have  been 


dealing  with  for  decades:  how  to  properly 
site  infrastructure  support  equipment, 
optimize  cooling  for  high  server  rack 
densities,  balance  data  center  efficiency 
against  business  needs  and  track  all  the 
little  details  that  can  make  or  break  an 
implementation. 


Six  Keys  to  a  Better,  Cooler  Data  Center 

I  work  in  a  Department  of  Defense  super¬ 
computing  center  located  at  the  Army  Engi¬ 
neer  Research  and  Development  Center 
(ERDC).  Right  now,  we’re  in  the  middle  of 
a  two-year  effort  to  totally  overhaul  its  data 
center  support  infrastructure.  Designing  a 
new  data  center  (or  retrofitting  an  old  one)  is 
a  complex  process,  but  the  six  ideas  below— 
road  tested  by  our  experiences  during  the 
past  decade  and  informed  by  ERDC’s  ongo¬ 
ing  infrastructure  modernization— will  get 
you  started  in  the  right  direction. 

I 

Decide  whetheryou  really  need 
your  own  data  center. 

Growing  your  computing  infrastructure  is  a  challenging, 
expensive  process.  A  minimally  robust  infrastructure  is 
going  to  include  power-switching  equipment  and  genera¬ 
tors.  But  almost  no  one  stops  there.  Added  fault  tolerance 
includes  batteries  or  flywheels  for  the  uninterruptible  power 
supply  (UPS),  reserve  water  supplies  in  case  your  utility 
water  is  interrupted,  redundant  components  and  possibly 
even  multiple  independent  commercial  power  connections. 
Then  you  have  to  protect  yourself  from  fire  and  natural 
disasters.  Plus,  once  the  data  center  is  built,  you’re  going  to 
have  to  field  a  crew  to  monitor  and  maintain  it. 

As  Amazon  CTO  Werner  Vogels  said  at  the  recent  Next 
Generation  Data  Center  conference,  unless  you’re  in  an 
industry  where  having  a  highly  efficient,  in-house  data 
center  translates  directly  into  revenue,  or  business  advan¬ 
tage,  you  might  be  better  off  running  your  applications  in 
someone  else’s  data  center. 

This  solution  isn’t  right  for  everyone,  but  as  utility  costs 
rise  and  growing  demand  squeezes  the  support  infrastruc¬ 
ture  even  tighter,  it’s  worth  considering. 


Weigh  the  costs  and  benefits 
of  green  design. 

Rising  costs  and  consumption  rates  are  driving  electricity 
concerns  to  the  front  of  IT  planning  conversations.  Items 
like  transformers,  electrical  wiring,  cooling  and  UPS  can 
have  large,  fixed  electrical  losses,  taking  a  slice  off  your 
available  power  before  it  gets  to  the  first  server. 

The  Green  Grid,  a  consortium  of  IT  companies  interested 
in  improving  data  center  energy  efficiency,  recommends 
right- sizing  your  infrastructure  by  eliminating  redundant 
components,  installing  only  the  equipment  you  need  to 
make  your  data  center  run  today.  According  to  the  group’s 
“Guidelines  for  Energy-Efficient  Data  Centers,”  right-sizing 
the  infrastructure  can  cut  your  electric  bill  by  half.  (For 
more  on  retrofitting  your  data  center  to  lower  costs,  see 
“Five  Ways  to  Find  Data  Center  Energy  Savings”  at  www 
.cio.com/article/128201.)  But  there  is  another  wrinkle  to 
the  energy  story  that’s  only  starting  to  work  its  way  into 
data  center  planning:  Our  national  utility  infrastructure 
is  starting  to  show  signs  of  wear. 

The  Aug.  1  bridge  collapse  in  Minneapolis  and  the  mas¬ 
sive  power  outages  in  the  early  years  of  this  decade  are  symp¬ 
toms  of  a  rapidly  declining  national  critical  infrastructure. 
Events  like  the  outage  on  Aug.  14, 2003,  which  left  50  million 
people  around  the  Great  Lakes  without  power,  are  expected 
to  become  more  common  over  the  next  several  years  unless 
significant  steps  are  taken  to  rein  in  demand  and  increase  the 
capacity  and  reliability  of  our  aging  power  grid. 

According  to  the  2006  report  of  long-term  power  util¬ 
ity  reliability  by  the  North  American  Electric  Reliability 
Corporation,  demand  for  electricity  is  expected  to  grow 
19  percent  in  the  next  10  years,  but  generation  capacity  is 
expected  to  grow  by  only  6  percent.  This  means  that  the 
capacity  margin  is  decreasing  every  year,  and  surges  in 
demand  or  regional  weather  events  are  more  likely  than 
ever  to  cause  outages  around  the  country. 

With  utility  power  disruption  likely  to  become  more 
frequent  in  the  near  term,  data  center  managers  should  be 
motivated  to  design  their  infrastructure  with  power  avail- 
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Data  Centers 


ability  in  mind,  including  redundant  power 
distribution  and  generation  systems  to  protect 
against  system  failure  in  the  face  of  commercial 
power  interruptions. 

Clearly,  you  need  to  design  your  infrastruc¬ 
ture  to  be  as  efficient  as  possible  (even  taking 
steps  like  specifying  high-efficiency  power  sup¬ 
plies  in  servers).  But  the  degree  to  which  you 
can  green  your  power  distribution  infrastruc¬ 
ture  will  depend  upon  the  value  of  continuous 
availability  to  your  organization  and  the  costs 
of  expanding  capacity.  For  example,  our  super¬ 
computing  mission  at  ERDC  requires  very 
robust  availability  of  our  computers.  Conse¬ 
quently,  our  electrical  distribution  infrastruc¬ 
ture  features  redundant  switches,  batteries 
and  electrical  generators.  These  enable  us  to 
perform  routine  maintenance  without  expos¬ 
ing  operations  to  an  interruption,  as  well  as 
continue  emergency  operations  over  long 
periods  during  which  a  failure  in  one  of  these 
components  might  be  expected.  This  increases 
our  fixed  electrical  losses,  but  is  unavoidable 
given  our  operational  requirements. 

(For  more  on  greening  your  data  center, 
see  “How  Green  Data  Centers  Save  Money”  at 
WWW. do. com/article/41405.) 


Demand  for 
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Improve  flexibility  by 
designingfor  closely  coupled  cooling. 

Computers  are  quite  efficient  at  two  jobs:  crunching  num¬ 
bers  and  turning  electricity  into  heat.  About  30  percent  of 
the  power  that  goes  into  the  data  center  is  turned  into  heat 
inside  servers. 

The  traditional  approach  to  cooling  puts  large  chillers 
outside  the  facility  to  cool  water,  which  is  then  pumped  to 
computer  room  air-conditioning  (CRAC)  units  on  machine 
room  floors.  This  approach  essentially  floods  the  entire 
room  with  cold  air  and  offers  very  little  flexibility  for  tar¬ 
geting  specific  hot  spots. 

The  concept  of  closely  coupled  cooling  has  moved  in 
and  out  of  fashion  over  the  years  in  supercomputing  cen¬ 
ters;  we  have  found  it  to 


The  Data  Center  Monster 


Data  centers  can  eat  up  as  much  as 
15  percent  of  your  IT  budget.  Not  good. 
To  discover  your  DATA  CENTER  TCO, 
go  to  www.cio.com/article/147251 
for  a  downloadable  TCO  calculator. 
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be  efficient  and  effective. 
The  idea  is  to  put  cooling 
as  near  as  possible  to  the 
source  of  the  heat  it  is 
meant  to  remove.  This 
approach  allows  for  tar¬ 
geted  cooling  and  control 


of  hot  spots,  and  can  result  in  shorter  air 
paths  that  require  less  fan  power  to  push 
and  pull  the  cold  air  around  the  room. 
Closely  coupled  cooling  can  allow  for  rack 
densities  up  to  four  times  the  density  of  a 
typical  room-oriented  cooling  solution.  As 
customer  demand  pushes  rack  densities  up, 
all  the  major  server  vendors  are  now  offer¬ 
ing  closely  coupled  configurations. 

There  are  many  rack-  and  chip-based 
closely  coupled  cooling  solutions.  For  exam¬ 
ple,  there  are  designs  that  install  cooling  in 
a  rack  form  factor  alongside  server  racks,  or 
place  it  at  the  top  of  each  rack  for  a  top-to-bot- 
tom  approach.  There  are  also  solutions  that 
deliver  chilled  water  directly  to  the  rear  door 
of  racks,  or  put  coolers  in  drawers  inside 
racks  alternating  with  drawers  of  servers. 

Chip-based  cooling  solutions  come  in 
two  basic  varieties.  The  simplest  deliver 
cool  water  to  one  or  more  radiators  located 
over  heat  sources  in  your  server.  More 
complex  systems  use  inert  liquid  that  is 
directly  applied  to  server  chips  in  a  closed 
loop  system.  Although  this  technology  has 
only  recently  been  adopted  for  commodity 
servers,  the  supercomputing  industry  has  been  using  it 
for  decades.  The  ERDC  supercomputing  center  was  using 
chip-level  vaporization  heat  exchange  in  some  of  its  Cray 
supercomputers  last  year. 

All  of  these  options  require  plumbing  for  chilled  water 
right  to  the  computer  racks,  and  you  need  to  plan  for  this 
as  you  are  designing  your  data  center  plumbing.  If  the 
thought  of  moving  water  into  the  heart  of  your  data  center 
causes  your  heart  to  skip  a  beat,  fear  not:  There  is  a  large 
body  of  engineering  knowledge  about  how  to  minimize 
the  risks.  You’ll  want  to  take  steps  like  keeping  your  water 
pipes  as  low  as  possible  under  your  raised  floor,  install¬ 
ing  leak  detectors,  isolating  electrical  runs  from  plumbing 
pipes  and  providing  leak-containment  features  like  gravity 
drains  and  drip  pans. 


Think  about  the  floor  tiles: 

It’s  the  I  ittle  stuff  that  matters. 

If  you  are  not  planning  or  cannot  plan  for  closely  coupled 
cooling,  there  are  still  steps  you  can  take  to  improve  your 
cooling  efficiency. 

Plan  to  minimize  the  profile  of  cables  and  pipes  you 
put  under  the  raised  floor  in  your  machine  room.  This  is 
the  space  that  your  CRAC  units  are  using  to  push  cold  air 
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CONTROLLING 

IT  COSTS 

Governance,  Standards,  Automation  Key  to  Curbing  Expenses 


The  costs  of  IT  infrastructure  are  high  and  still 
rising,  and  gaining  control  of  them  is  clearly  a  high 
priority  for  many  organizations.  A  huge  challenge? 
Yes.  But  there  are  steps  business  and  IT  leaders  can  take 
to  bring  IT  infrastructure  expenses  under  control. 

In  a  recent  poll  of  300  business  and  IT  executives 
surveyed  by  IDG  Research  Group,  three-quarters  of 
respondents  say  controlling  IT  costs  is  a  critical  or  high 
priority  at  their  organization.  Gaining  control  of  those 
costs  will  become  even  more  important  over  the  next  18 
months  for  many  organizations, 
according  to  47  percent  of  the 
executives  surveyed. 

“A  lot  of  the  costs  that  we 
have  in  IT  are  associated  with  just 
trying  to  respond  to  increasing 
needs,”  says  Laura  Grandgenett, 

CTO  at  Dubuque  University. 

“Reacting  to  these  needs  in  a  more 
thoughtful,  organized  way  has 
been  the  best  way  we  have  to  control  the  cost.  We  need  to 
look  at  what  it  will  cost,  and  see  if  there  are  other  options  to 
deal  with  the  same  problem  in  some  other  way — whether 
that’s  based  in  technology  or  based  in  just  redesigning  the 
process  by  which  we’re  doing  things.” 

Rising  Costs 

Building  and  running  an  IT  infrastructure  is  one  of  the 
largest  expenses  an  organization  faces.  This  includes  the 
necessary  additions  of: 

•  server  and  desktop  hardware  and  software 
•  mobile  devices 
•  networking  technologies 
•  storage  systems 
•  other  technology  components 

Another  factor:  the  integration  necessary  whenever 


new  technology  is  added  to  older  systems,  or  when  systems 
are  purchased  from  multiple  vendors  that  use  different 
standards.  The  costs  of  training  the  IT  staff  and  end  users, 
particularly  when  new  systems  or  applications  are 
deployed,  also  add  up.  And  the  energy  costs  to  run  a  data 
center,  especially  for  large  enterprises,  are  on  the  rise. 

While  costs  have  continued  to  increase,  organizations 
have  placed  a  heavy  emphasis  on  showing  a  return  on 
investment  (ROI)  for  technology  purchases.  The  survey 
shows  that  more  than  half  the  respondents  rank  demon¬ 
strating  or  measuring  ROI  from 
IT  investments  as  a  critical  or 
high  priority.  A  majority  of  the 
respondents  say  improving  end- 
user  and  IT  staff  productivity  are 
also  priorities. 

“We  are  adding  ways  to 
evaluate  our  ROI,  such  as  using 
business  analysis  methods,”  says 
Linda  Lane,  senior  product 
manager  for  staffing  company  Wimmer  Solutions.  “There  is 
always  an  identifiable  way  to  analyze  and  measure 
the  relationship  of  what  something  costs,  even  if 
it  appears  intangible  such  as  brand  protection.” 

Controlling  IT  infrastructure  costs  isn’t 
easy,  and  organizations  face  a  number  of  chal¬ 
lenges.  Among  them: 

•  supporting  legacy  systems  while  staying 
current  with  technologies 

•  supporting  users  who  need  to  be  productive 
from  any  location 

•  meeting  a  variety  of  industry  and  government 
regulations  related  to  IT  and  technology- 
supported  processes 

•  keeping  information,  applications  and  systems 
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Gaining  Control 

One  of  the  best  ways  to  control  costs  is  to  develop  an 
effective  IT  governance  program  that  includes  elements 
for  evaluating  and  tracking  all  major  technology  invest¬ 
ments.  The  governance  effort  should  also  include  creat¬ 
ing  and  enforcing  policies  that  address  repeatable  IT 
solutions  and  practices,  and  having  a  disciplined 
approach  to  the  IT  organization. 

In  addition  to  adding  governance,  organizations  can 
put  in  place  strong  project  management  functions  to  help 
control  costs  for  major  IT  efforts,  such  as  a  migration  to 
a  new  operating  system. 

Organizations  can  also  use  balanced  scorecards.  Six 
Sigma  or  some  other  type  of  quantitative  value  measure¬ 
ment  to  gauge  the  ROI  or  success  of  their  IT  invest¬ 
ments.  All  of  these  tools  enable  organizations  to  build 
better  processes  and  determine  results. 

Automation  is  another  effective  tactic.  The  survey 
shows  that  of  the  organizations  that  are  automating  IT 
operations  and  processes,  50  percent  have  seen  reduced 
costs  as  a  result.  A  slightly  higher  percentage  has  seen 
improved  ROI  on  IT  investments.  Organizations  are 
automating  a  variety  of  tasks,  including  patch  manage¬ 
ment,  configuration  management,  upgrades  to  new  operat¬ 
ing  environments,  application  delivery  and  virtualization. 

“Were  starting  to  use  virtualization  on  servers;  not 
so  much  for  production  environment  things  but  where 


Novell  Solutions  for  controlling  costs 

Novell's  strategy  for  helping  customers  get  a  handle  on  their  IT  costs 
includes  simplification,  control  and  maximization.  By  managing 
multiple  platforms  and  systems,  Novell  allows  customers  to  choose 
what's  right  for  their  business. 

The  company's  automation  solutions  put  organizations  in  control 
of  their  systems.  And  Novell  allows  customers  to  get  the  most  from 
their  IT  assets  by  taking  advantage  of  resources  such  as  unused  soft¬ 
ware  licenses,  bandwidth,  and  computing  capacity. 

Systems  Management  from  Novell  is  a  comprehensive  set  of 
integrated  ITIL-based  services  that  orchestrate  IT  management  and 
business  processes  across  diverse  server  and  client  platforms. 

Novell®  ZENworks®  is  a  comprehensive  set  of  integrated  tools  that 
automatically  enforces  business  and  IT  policies  to  dynamically  manage 
and  maintain  IT  resources  based  on  user  and  asset  identities. 

ZENworks  uses  Policy-Driven  Automation  to  control  IT  costs  by  elimi¬ 
nating  administrator  effort,  reducing  IT  skill  requirements  and  optimiz¬ 
ing  the  value  of  IT  assets  across  diverse  server  and  client  platforms. 

ZENworks  enhances  resource  and  service  delivery  to  increase 
the  efficiency,  scalability  and  flexibility  of  IT  staff  and  assets.  The 
Novell  ZENworks  systems  and  resource  management  family  works 
from  the  desktop  to  the  data  center,  enabling  organizations  to  deter¬ 
mine  how  well  IT  delivers  a  range  of  services  to  support  the  business. 
These  technologies  help  CIOs  find  more  relevant  metrics  that  show 
business  alignment,  service  quality  supportive  of  that  alignment,  and 
cost  efficiency  in  delivering  service  to  the  business. 

get  more  effective  use  out  of  their  technology  invest¬ 
ments  (see  sidebar). 


We  re  starting  to  use  virtualization  on  servers;  not  so  much  for  production 
environment  things  but  where  we  have  testing  and  development  environments.” 


we  have  testing  and  development  environments,”  says 
Joel  Gibbons,  team  leader  of  IT  operations  at  National 
FFA  Organization,  a  national  organization  of  students 
preparing  for  careers  in  the  science,  business  and  technol¬ 
ogy  of  agriculture.  “Were  also  starting  to  look  at  remote 
or  automated  monitoring  for  some  of  our  networking 
and  security  functions.” 

Those  organizations  that  have  been  successful  at 
controlling  IT  costs  say  the  most  important  factors 
include  budgeting/cost-cutting  methods  and  long-term 
planning  (20  percent),  product  evaluation  and  reviewing 
what  is  needed  and  requested  (18  percent),  reducing  staff 
and  doing  more  with  less  (10  percent),  as  well  as  consol¬ 
idation,  centralization  and  standardization  (10  percent). 

Some  IT  vendors,  such  as  Novell,  offer  products 
and  services  to  help  customers  control  their  IT  costs  and 


Still,  IT  costs  will  likely  continue  to  rise  for  a 
number  of  reasons,  including: 

•  addition  of  new  hardware  and  software 

•  need  for  integration,  increasing  mobility 

•  training  in  the  use  of  applications  and  systems 

•  energy  to  run  data  centers 

Organizations  will  continue  to  face  challenges  in  keeping 
IT  budgets  in  line.  But  with  proper  IT  governance,  the 
adoption  of  standards,  and  automation,  they  can  start  to 
control — and  even  reduce — these  costs.  ■ 

Go  to  www.cio.com/whitepapers/costs 

to  obtain  a  free  download  of  the  complete  white  paper  “Controlling  IT 
Costs:  Governance,  Standards,  Automation  Key  to  Curbing  Expenses”. 
Based  on  a  major  research  survey  by  IDG  Research  Services,  this 
just-released  white  paper  features  in-depth  discussions  with  CIOs  at 
midsize  and  enterprise  class  organizations,  and  draws  on  peer  insights 
to  help  CIOs  create  more  effective  and  efficient  IT  systems. 
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next  generation  of 
standout  IT  leaders. 
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currently  be  top  IT 
lieutenants— but  not 
yet  full-fledged  CIOs. 

Visit  www.cio.com/cio-awards/ones-to-watch/ 
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#■ 


Presented  by  CIO  magazine  and  the  CIO  Executive  Council 

CIO  Executive  Council 

The  Professional  Organization  for  CIOs 


Business 

Technology 

Leadership 


Candidates  will  be  nomi¬ 
nated  by  their  CIO  based  upon 
the  characteristics  identified  in 
the  application  at  www.cio 
.com/cio-awards/ones-to- 
watch/.  Candidates  may  also 
nominate  themselves  or  be 
nominated  by  another,  but  all 
nominations  must  be  endorsed 
by  a  CIO. 

A  panel  of  leading  CIOs 
will  judge  the  nominees  and 
choose  the  winners,  who 
will  be  featured  in  a  special 
May  2008  issue  of  C/O. 


Winners  will  also  be 
honored  at  the  fourth  annual 
CIO  Leadership  Conference 
to  take  place  May  18-20, 2008, 
at  the  Sheraton  Boston  Hotel. 

We  will  accept 
nominations  through  Nov.  23. 
For  more  about  this  prestigious 
award,  go  to  www.cio.com/ 
cio-awards/. 


ICIOI 

ExaortiwPngnK 

Where  yen  need  te  be 


CIO  Executive  Programs  combine  cutting-edge  education  and  networking  opportunities  for 
busy  executives.  Our  programs  attract  the  best  and  brightest  IT  executives  and  our  brand 
is  synonymous  with  the  highest  quality  and  integrity.  These  face-to-face  conferences  are 
regarded  as  the  trusted  networking  resource  for  the  nation’s  CIOs  because  we  know  and 
understand  the  executive  IT  community  better  than  any  other  IT  resource. 


CIO  Leadership  Conference 

May  18-20,  2008 
Sheraton  Boston 
Boston,  Massachusetts 

CIO  &  CSO  Business  Continuity  Forum 

July  15-16,  2008 

Marriott  New  York  at  the  Brooklyn  Bridge 
New  York,  New  York 

CIO  100  Symposium  &  Awards 

August  24-26,  2008 
The  Broadmoor 
Colorado  Springs,  Colorado 

CIO|09  The  Year  Ahead 

November  9-1 1 , 2008 
Loews' Coronado  Bay 
Coronado,  California 


For  more  ioformatiofl 
aod  to  register  visit 

www.cio.Gom/exeGUtive-programs 
or  call  800-366-0246 


More  than  500  of  your  peers  in  the  CIO  Executive  Council 

are  collaborating  on  issues  essential  to  the  IT  community  —  and  beyond. 


Since  the  CIO  Executive  Council's  inception  in  2004,  members  have  participated  in  hundreds 
of  peer-to-peer  calls  and  interactive  group  meetings  —  enabling  them  to  connect  to  one 
another  at  any  time,  on  any  topic.  Change  management,  software  licensing  practices, 
expanding  the  role  of  the  CIO,  applying  the  right  Web  2.0  strategy,  getting  today’s  youth  inter¬ 
ested  in  IT  —  these  are  just  some  of  the  upcoming  issues  our  members  will  tackle. 


Join  the  discussion.  To  view  more  upcoming  CIO  Executive  Council  meet¬ 
ings  or  to  recommend  discussions  most  relevant  to  you  and  your  enterprise,  visit 
www.cioexecutivecouncil.com/community. 


CIO  Executive  Council 


The  CIO  Executive  Council  was  created  by  readers  of  CIO  magazine  and  leaders  within  the 
community  of  CIOs  to  leverage  the  individual  and  collective  strengths  of  its  members,  to  serve 
as  unbiased  and  trusted  advisors  to  each  other  and  to  advance  the  CIO  profession  and  its  role  in 
driving  shareholder  results  for  their  respective  organizations.  In  just  three  short  years  the  CIO 
Executive  Council  has  grown  to  over  500  CIOs  worldwide,  representing  executive  leadership  in 
organizations  with  approximately  $2.5  trillion  (USD)  in  annual  revenues. 

For  information  on  membership,  please  visit  www.cioexecutivecouncil.com. 
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Data  Centers 


toward  your  computers,  and  the  effectiveness 
of  the  energy  used  can  be  greatly  increased  if 
you  can  minimize  the  interruptions  that  air 
encounters.  Minimizing  under- floor  obstruc¬ 
tions  can  also  help  eliminate  data  center  hot 
spots  and  prevent  air  handlers  from  working 
against  one  another. 

Another  step  you  can  take  is  to  commission 
a  fluid  dynamics  study  of  your  data  center  or 
buy  the  software  you  need  to  perform  that 
study  yourself.  This  approach  uses  a  com¬ 
puter  model  to  simulate  the  flow  of  air  around 
your  data  center  and  can  help  you  identify  the 
causes  of  and  solutions  to  cooling  problems, 
including  the  optimum  placement  of  perfo¬ 
rated  floor  tiles. 

The  ERDC  supercomputing  center  adopted 
this  approach  several  years  ago  to  make  sure 
we  were  getting  the  most  out  of  our  cooling. 

Perforated  tiles  are  often  simply  lined  up  in 
front  of  the  racks  on  the  cold  aisle  of  servers 
in  a  data  center.  But  “surprisingly,”  says  Paula 
Lindsey,  integration  lead  for  the  center,  “the 
most  effective  placement  of  perforated  tiles 
isn’t  always  right  in  front  of  the  machine.” 

The  fluid  dynamics  study  showed  that  we 
needed  to  increase  the  diameter  of  perforations  in  some 
tiles  and  concentrate  additional  courses  of  perforated  tile 
in  critical  areas. 

1 

Move  support 
equipment  outside. 

Properly  siting  your  infrastructure  support  systems  will 
improve  efficiency  and  make  it  easier  for  you  to  expand 
capacity  in  the  future.  One  of  the  most  important  steps 
you  can  take  is  to  move  as  much  of  your  power  and  cool¬ 
ing  equipment  out  of  your  data  center  as  possible.  In  fact,  if 
you  have  the  space,  a  good  solution  is  to  move  most  of  these 
items  outside  the  building. 

Here’s  an  example.  When  we  needed  a  short-term  fix  to 
get  two  megawatts  of  additional  power  for  a  new  super¬ 
computer  at  ERDC,  we  found  that  we  needed  to  add  UPS 
and  generator  equipment  that  would  not  fit  into  the  build¬ 
ing  that  housed  the  rest  of  the  electrical  distribution  infra¬ 
structure.  This  problem  was  compounded  by  the  way  the 
building  was  sited  10  years  ago.  It  was  built  between  the 
foot  of  a  steep  hill  and  a  road.  Our  solution— putting  the 
equipment  outside  in  an  area  created  by  cutting  into  the 
hill— was  expensive  and  added  time  delays  to  an  already 
tight  schedule. 


Our  new  long-term  design  places  most 
of  these  components  outside  the  building 
in  modular  units  in  a  newly  created  (flat) 
utility  field.  “This  move  eliminates  the  con¬ 
straints  that  building  walls  place  on  us  and 
should  give  us  the  flexibility  we  need  for  at 
least  another  decade,”  says  Greg  Rottman, 
the  engineer  in  charge  of  implementing  the 
upgrade. 

Moving  distribution  and  support  equip¬ 
ment  outside  is  also  eco-friendly.  In  a  report 
published  earlier  this  year,  The  Green  Grid 
found  that  as  much  as  25  percent  of  the 
electricity  going  into  the  data  center  is  con¬ 
verted  to  heat  in  power-distribution  units, 
UPS  equipment  and  switchgear.  Moving  this 
equipment  out  of  the  data  center,  outside  the 
building  if  possible,  decreases  your  overall 
energy  consumption  by  eliminating  the  need 
to  remove  the  heat  generated  by  these  com¬ 
ponents. 


Monitorfor 
power  management. 

Do  you  know  how  much  power  you’re  using?  Are  your 
servers  pulling  more  or  less  electricity  than  the  vendor 
specs  say  they  should?  How  close  to  your  facility’s  power 
capacity  will  that  next  machine  upgrade  put  you? 

An  infrastructure  monitoring  system  for  your  power 
and  cooling  systems  needs  to  be  part  of  any  upgrade 
you’re  planning.  Actively  managing  and  monitoring  your 
energy  usage  will  help  you  plan  for  the  future  and  assess 
the  effectiveness  of  steps  you  take  to  improve  data  center 
efficiency. 

Convincing  your  enterprise  to  fund  data  center  improve¬ 
ments  not  directly  related  to  business  delivery  can  be  a 
challenge.  You  may  have  to  build  your  monitoring  system 
piece  by  piece  as  you  can  afford  it.  But  it  makes  sense  to 
add  your  power  monitoring  to  your  data  center  before  you 
undertake  major  changes.  This  will  allow  you  to  establish  a 
meaningful  baseline  from  which  to  judge  the  effectiveness 
of  your  changes  and  plan  more  effectively  for  the  future. 

Because  whatever  else  it  may  bring,  the  future  will  not 
ask  less  from  the  data  center;  it  will  ask  for  more.  BQI 


John  West  is  a  senior  fellow  in  the  Department  of  Defense  High 
Performance  Computing  Modernization  Program  and  executive 
director  of  that  program’s  supercomputing  center  at  the  U.S. 
Army  Engineer  Research  and  Development  Center.  To  comment 
on  this  article,  go  to  www.cio.com/article/137550. 
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to  get  you  the  IT  help  you  need,  we're  there. 


More  demands  and  more  pressure.  Less  time  and  fewer  resources.  Business  today  is  full  of  challenges.  When  it 
comes  to  technology,  CDW  will  do  what  it  takes  to  respond  to  your  needs.  We  have  products  from  the  top  names 

.V-V-  . 

in  the  industry,  in  almost  every  technology  category  imaginable.  Our  dedicated  account  managers  and  technology 
specialists  can  offer  advice  and  create  solutions,  from  the  simple  to  the  complex.  We  even  have  a  full  range  of  custom ^ 
configuration  services  at  your  disposal.  So  when  you  need  IT  help,  think  CDW.  We're  there  with  whatever  you  need, ' 
whenever  you  need  it.  '  ■  : 


CDW.com  800.399.4CDW 


©2007  CDW  Corporation 


The  Right  Technology.  Right  Away. 


CIO  CONTACT 
INFORMATION 


SALES  AND  SERVICES 


CIO  SALES  OFFICES 
President  and  CEO 

Michael  Friedenberg 
508  935-4310 

Publisher 

BobMelk*415  975-2685 
Publisher  Emeritus 

Gary  J,  Beach 
508  935-4202 

EAST  COAST 

Regional  Sales  Manager 

Ellie  St.  Louis 
201634-2332 
Account  Executive 
Anna  Mkrtchyan 
201634-2331 
Senior  Sales  Associate 
Norma  Tamburrino 
201634-2329 
Fax  •  201 634-9513 

NEW  ENGLAND/CENTRAL 

Regional  Sales  Manager 

Brett  Ferry  •  508  935-4684 
Sales  Operations  Manager 
Dawn  Cora 
508  935-4092 
Fax  •  508  879-6063 

SOUTHERN  CALIFORNIA 

Regional  Sales  Manager 

Kevin  Ebmeyer  •  415  975-2684 


WEST  COAST 

Regional  Sales  Managers 

Kevin  Ebmeyer 
415  975-2684 
Michelle  Stutsman 
415  975-2686 

Regional  Account  Executive 

Lawrence  Fu 
415-975-2683 

CUSTOM  SOLUTIONS 

GROUP 

Vice  President 

Matt  Avery 
508  935-4796 

National  Director,  Sales 

Adam  Dennison 
508  935-4087 

Editorial  Director 

Jim  Malone 

Associate  Editor 

Anne  Taylor 

Senior  Project  Operations 
Manager 

Amy  Greenleaf 

Project  Managers 

Karen  Capland, 

Amy  Freeman 

For  further  sales  information: 

www3.cio.com/marketing/ 

sales_contact.html 


ONLINE  SALES 

Vice  President,  Online  Sales 

Brian  Glynn  •  508  935-4586 

Online  Regional  Sales 
Manager 
Richard  Hartman 
508  935-4487 
Online  Regional  Sales 
Manager,  West  Coast 
Erika  Karr 
415  978-3329 
Manager,  Online  Account 
Services 

Danielle  Tetreault 
508  988-7969 

Online  Account  Services 
Specialist 

Valerie  Sumner 
508  988-7877 

Online  Advertising  Specialist 

Irina  Gabechiia 
508  935-4414 

Online  Sales  Associate 

Erin  Sullivan 
415  975-2687 

Online  Account  Services 
Coordinator 

Hayley  Nickerson 
508  988-7819 

LIST  SERVICES 

Contact  Paul  Capone  of  IDG 
List  Services  at  508  370-0865 
or  pcapone@idglistcom. 


CIO  is  published  in  the 
U.S.  as  well  as  in: 

Australia,  CIO  Australia 

www.idg.com.au 

Canada,  CIO  Canada 

cio.itworldcanada.com 

China,  CEO  &  CIO  China 

www.ceocio.com.cn 

France,  CIO  France 

www.idg.tr/cio 

Germany,  CIO  Germany 

www.cio.de 

India,  CIO  India 

91-80-521-0309/12 

Japan,  CIO  Japan 

www.idg.co.jp 

The  Netherlands, 

CIO  Netherlands 
www.cio.nl 
New  Zealand, 

CIO  New  Zealand 
www.idg.co.nz 
Norway,  CIO  Business 
Standard 

www.business-standard.no 
Poland,  CXO  Poland 
www.cxo.pl 

Singapore,  CIO  ACEN/ 
Hong-Kong  www.idg.com.sg 
South  Korea,  CIO  Korea 
www.cio.seoul.kr 
Sweden,  CIO  Sweden 
www.cio.idg.se 


INDEX  OF  COMPANIES  AND  ADVERTISERS 


Page  numbers  refer  to  the  first  page  of  the  article(s)  in  which  the  company  has  a  substantial  mention.  This  index  is 
provided  as  a  service  to  readers.  The  publisher  does  not  assume  any  liability  for  errors  or  omissions. 


COMPANY  INDEX 

Abbott  Laboratories  . 35 

Accenture . 19 

Amazon.com  Inc . 56 

American  Home  Mortgage . 11 

AMR  Research  . 35 

Apple  Inc . 11, 35, 50 

AutoZone  Inc . 11 

Bally  Total  Fitness  Corp . 11 

BMC  Software  Inc . 19 

Braun  GmbH  . 35 

Bridgestone  Americas 

Holding  Inc . 35 

Burger  King  Brands  Inc . 35 

Business  Objects  SA . 11 

Byer  California . 35 

Centers  for  Disease  Control  and 

Prevention . 35 

Chubb  Corp, .The . 28 

Cisco  Systems  Inc . 19 

Compass  Group  North 

America . 19 

Computer  Associates . 19 

ConAgra  Foods  Inc . 35 

Consolidated  Energy  Inc . 11 

Dana  Corp . 11 

Dell . 50 

Delphi  Corp . 11 

Dickfs  Sporting  Goods . 28 

Disney . 35 

Dole  Food  Co . 35 

EvenfloCo.  Inc . 35 

Evian . 11 

Ferrari  America  Inc . 11 

Ford  Motor  Co . 11,35 


Forrester  Research 

Inc . 11,19,28 

Gartner  Inc . 56 

General  Motors  Corp . 11, 19 

Google  Inc . 50 

Hartford  Financial  Services 

Group  Inc.,  The . 19 

Hewlett-Packard 

Development  Co . 19, 68 

Hurwitz  &  Associates . 19 

12  Technologies . 35 

iBahn . 11 

IBM  Corp . 11,19 

I  DC . 19,56 

JetBlue  Airways . 50 

Kellogg  NA  Co . 35 

Korn/Ferry  International . 19 

Lear  Corp . 11 

Linux  Online  Inc . 50 

LM  Ericsson  . 35 

Manufacturing  Insights . 35 

Mattel  Inc . 35 

McKesson  Corp . 28 

Merck  &  Co.  Inc . 35 

Metz  Fresh  LLC . 35 

Microsoft  Corp . 28, 35 

MIT  . 35 

Motorola  Inc . 28 

National  Highway  Traffic  Safety 

Administration . 35 

New  Century  Financial  Corp.  .11 

Nokia . 11,35,50 

Nunes  Co.,  The . 35 

Oracle . 35,  50 

Philips  Electronics  N.V, . 35 


Procter  &  Gamble . 35 

Red  Prairie  Corp . 35 

REI  . 35 

SAP . 11,35, 50 

Service  Merchandise . 11 

Sheila  Greco  Associates  LLC  .28 

SmartOps  Corp . 35 

Society  for  information  Manage¬ 
ment  . 11 

Solectron  Corp . 19 

Sony  Corp,  of  America . 35 

Southwest  Airlines  Co . 50 

Strategos . 50 

Taco  Bell  Corp . 35 

U.S.  Army  Engineer  Research 
and  Development  Center 

(ERDC)  . 56 

U.S.  Department  of 

Agriculture  . 35 

U.S.  Food  and  Drug 

Administration . 35 

United  Food  Group  Inc . 35 

Valuedance  . 24 

Vertu . 11 

Visteon  Corp . 11 

Whirlpool  Corp . 50 

Whole  Foods  Market  IP, 

L.P.  . 50 

Wolverine  World  Wide,  Inc . 11 

ADVERTISER  INDEX 

Accenture . 38 

AT&T  Wireless . 45 

BearingPoint  Inc . 47 

CA . C4,  24a 


Capgemini . 

. 27 

CDW  Corp . 

. 65 

Cognizant  Technology 

Solutions . 

. C2 

CXO  Media  Inc . 

. 25, 37,  59, 61,  67 

Digital  Realty  Trust . 

. 10 

EDS . 

. 17 

Fujitsu . 

. 2 

Hewlett-Packard  Co . 

..,.5,21 

IBM  Corp.  (regional) . 

. 62 

Intel  Corp . 

. 13 

Microsoft  Corp . 

. 31 

Microsoft  and  Novell . 

. 7 

Motorola  Inc . 

. C3 

Novell  Inc . 

. 60a 

Oracle  Corp . 

. 54 

Panasonic  Corp . 

. 29 

PGP  Corp . 

. 36a 

Polycom  Inc . 

. 49 

Primavera  Systems  Inc. . 

. 57 

Project  Management  Institute 

Inc . 

. 34 

RSA  Security  Inc . 

..22,23 

Samsung . 

. 18 

Sun  Microsystems  Inc.  .. 

.41,43 

SunGard  Availability  Services 

Inc . 

. 53 

Tata  Consultancy  Services 

Ltd . 

. 9 

TEKsystems . 

..32,33 

Toshiba  America  Business 

Solutions  Inc . 

. 15 

Toshiba  America  Information 

Systems  Inc . 

. 51 

Editorial,  Advertising  and 
Business  Offices:  CXO  Media 
Inc.,  492  Old  Connecticut  Path, 
P.O.  Box  9208,  Framingham,  MA 
01701-9208,  508  872-0080, 

CIO  (ISSN  0894-9301)  is  pub¬ 
lished  semimonthly  and  as  a 
combined  issue  Dec.  15/Jan.  1  by 
CXO  Media  Inc.  Periodicals  post¬ 
age  paid  at  Framingham,  MA,  and 
at  additional  mailing  offices.  Can¬ 
ada  Pubiications  Mail  Agreement 
Number  1902075.  CANADIAN 
POSTMASTER:  Please  return 
undeliverable  copy  to  RO.  Box 
1632,  Windsor,  ON  N9A  7C9. 

Reprints  &  Permissions: 

For  information  about  reprints 
and  copyright  permissions, 
please  contact  The  YGS  Group, 
800-290-5460,  ext,  150, 
cio@theygsgroup.com. 

Photocopy  Rights:  Permission 
to  photocopy  for  internal  or 
personal  use  or  the  internal  or 
personal  use  of  specific  clients  is 
granted  by  CIO  for  users  through 
the  Copyright  Clearance  Center, 
provided  that  a  fee  of  $3.50  per 
copy  of  the  article  is  paid  directly 
to  Copyright  Clearance  Center, 
222  Rosewood  Drive,  Danvers, 

MA  01970.  www.copyrlght.com. 
Please  specify:  ISSN  0894-9301. 
Permission  to  photocopy  does 
not  extend  to  contributed  articles 
followed  by  this  symbol:  T 

Subscriptions:  CIO  is  free  to 
qualified  information  executives. 
To  apply,  use  our  online  subscrip¬ 
tion  form  at  www.subscribe 
.clo.com.  Subscriptions  are  also 
available  on  a  paid  basis  at  a  rate 
of  $95  for  the  United  States  and 
Canada,  $195  International  (pay¬ 
able  in  U.S.  funds  only)  and  may 
be  ordered  online  at  www 
.subscribe.cio.com/services 
.html.  Or  address  inquiries  to 
CIO,  P.O.  Box  489,  Northbrook, 

IL  60065-0489;  866  354-1125. 
Please  allow  four  to  six  weeks  for 
a  new  subscription  to  begin.  The 
single  copy  price  is  $9  for  the 
United  States  and  Canada,  and 
$15  International.  Prepayment  is 
required,  payable  in  U.S.  funds. 

Change  of  Address:  Please  go  to 
www.omeda.com/custsrv/cio 
and  follow  the  online  instructions. 

Postmaster:  Send  change  of 
address  to  CIO.  P.O.  Box  489, 
Northbrook,  IL  60065-9816, 
Printed  in  the  U.S.  A. 


66  NOVEMBER  15,  2007  |  www.cio.com 


ClO.com’s  e-Mail  Newsletters 


The  Updated 

Management  &  Enterprise 
Information  You  Want 

Delivered  right  to  your  desktop. 

It’s  the  best  way  to  keep  one  step  ahead  of  the  competition. 


□  Advice  &  Opinion 

This  week’s  top  advice  &  opinion  postings. 

□  CIO  Careers 

Advice  for  your  career  plus  job  postings. 

□  CIO  Enterprise 

Enterprise-level  technology  information, 
news  and  tools. 

□  CIO  Enterprise  Applications 

A  CIO’s  monthly  guide  for  enterprise 
resource  planning. 

□  CIO  Information  Security 

IT  security  information  and  news  the  CIO 
needs  to  know  about. 

□  CIO  Insider 

Your  guide  to  the  latest  from  CIO.com. 

1^  CIO  Leader 

Updates,  insights  and  advice  from 
CIO.com  on  hiring,  firing  and  inspiring. 


1^  CIO  News  Watch 

The  week’s  top  news  stories. 

□  CIO  Mobile 

Providing  information  on  emerging  wireless 
technologies  and  infrastructure. 

□  CIO  SOA 

Your  resource  for  service-oriented  and 
enterprise  architecture. 

□  CIO  Tech  Poll 

Results  of  our  quarterly  survey,  covering  IT’s 
overall  health  as  well  as  spending  and  trends. 

□  CIO  Tech  Watch 

The  latest  IT  news,  reviews  &  analysis. 

1^  CIO  Whitepapers 

Your  guide  to  new  and  upcoming  whitepapers. 

□  Research  from  CIO 

Highlights  of  CIO’s  most  recent  IT  research. 


Sign  up  now  for  ClO.com’s  complimentary  e-mail  newsletters 
www.cio.com/newsletters 


Business  Technology  Leadership 


Everything  I 
know  about 
entrepreneurial 
management 
I  learned  from 
Dave  Packard. 
Packard,  a  founder  of 
Hewlett-Packard,  was 
a  friend,  my  mentor 
and  the  most  important 
influence  on  my  life.  He 
and  Bill  Hewlett,  also 
a  friend,  established 
Silicon  Valley  and  the 
foundation  for  every¬ 
thing  that  transpired 
there.  In  my  case,  the 
most  important  thing 
was  that  they  were 
entrepreneurs  who  ran 
HP  as  a  venture  capital 
enterprise.  They  did  this 
by  incubating  new  busi¬ 
nesses  within  the  com¬ 
pany,  the  way  venture 
capitalists  have  tried  to 
do  subsequently. 

Bringing  new 
technologies  to 
market  is  about 
risk  and  timing. 

When  an  idea  comes  to 
you,  it’s  always  a  mix 
of  people,  technology, 
marketing,  even  legal 
issues.  You  have  to  iden¬ 
tify  the  most  important 
risk  element  and  struc¬ 
ture  the  deal  so  your  ini¬ 
tial  dollars  get  rid  of  it. 

If  you  do  this  properly, 
a  modest  amount  of 


money  will  get  rid  of  the 
maximum  amount  of 
risk.  You  can  then  pour 
the  money  into  a  situa¬ 
tion  with  a  high  upside. 
However,  you  don’t 
want  to  be  so  early  in  a 
technology  that  you  are 
funding  pure  research. 
But  you  don’t  want  to 
be  too  late.  Timing  is 
important. 

I've  made  bets 
that  didn't  pay  off. 

Many  of  them!  KPCB 
gambled  unsuccessfully 
on  pen-based  comput¬ 
ing.  We  were  too  early. 

I  hate  to  talk  about  our 
mistakes,  but  we’ve 
made  them.  You  just 
have  to  back  away  and 
say  there  are  other  fish 
in  the  sea,  so  let’s  go 
catch  them. 

My  experience 
with  CIOs  over  the 
years  is  that  they 
are  essential. 

But  my  advice  to  them 
is  to  remember  the 
old  Russian  proverb: 
“Better  is  the  enemy  of 
good."  Huge  sums  can 
be  spent  on  information 
technology.  You  don’t 
want  to  end  up  being 
noncompetitive  even 
though  you’re  brilliantly 
informed  about  every¬ 
thing.  You’ve  got  to  have 


To  comment  on  this  article, 
go  to  www.cio.com. 


VC  legend 
Tom  Perkins 

cofounded  Silicon 
Valley’s  Kleiner 
Perkins  Caufield& 
Byers.  Long  associ¬ 
ated  with  Hewlett- 
Packard,  he  resigned 
from  its  board  in 
2006  in  a  dispute 
overthe  board  spy¬ 
ing  on  its  owndireo- 
tors,  sparking  an  SEC 
investigation  and  the 
exitof  HP’sohairman. 
His  memoir  VaZ/ey 
Boy  published 
this  month. 
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a  cost  consciousness  as 
the  CIO.  Don’t  get  swept 
away;  There  will  always 
be  more  proposals  to 
fund  than  you  can  do. 

Sometimes  you 
have  to  throw 
yourself  on  your 
sword. 

But  the  underlying 
question  is  this;  Did  1 
make  a  mistake  when 
I  resigned  from  HP’s 
board  of  directors? 
Honestly,  probably 
I  did.  I  was  emotion¬ 
ally  involved  with  the 
company  so  this  was  an 
impassioned  decision. 
Anytime  you  do  some¬ 
thing  in  anger  you’d  bet¬ 
ter  reexamine  it.  Would 
I  do  it  again?  I  probably 
would.  I  felt  the  board 
was  making  a  profound 
mistake  and  that  the 
nature  of  this  investiga¬ 
tion  into  media  leaks 
from  its  own  members 
was  out  of  proportion. 

I  thought  the  methods 
used  were  ethically 
questionable,  if  not  ille¬ 
gal.  If  I  had  not  resigned, 
maybe  I  could’ve 
changed  things  from 
within  the  company. 

But  maybe  not. 
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We're  secure.  We're  compliant. 
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Congratulations.  Your  IT  security  is  working  hard.  But  there's  something  more  it  should  do  (besides  the  protection,  compliance, 
access,  etc.).  IT  security  should  actually  make  your  business  more  efficient.  More  flexible.  More  competitive.  CA  can  help.  Our 
Security  Management  centralizes  your  identity  and  access  management  to  turn  IT  security  into  a  proactive,  business-building 
tool.  So  your  security  strengthens  customer  relationships,  grows  partnerships  and  helps  your  enterprise  address  changing 
markets  with  ninja-like  agility.  All  with  CA's  best-in-class  modularity,  scalability  and  integration.  But  don't  just  take  our  acronym 
for  it.  Download  the  white  paper,  "Security  Management:  Aligning  Security  with  Business  Opportunities,"  at  ca.com/secure. 
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